Skip to content

02 / Login + Wallet Transfer APIs

Once you have your api_key and api_secret, you can begin integration.

API domain: https://gateway-api.bwsh7twk.com/

After the Login API integration is complete, use the redirect_url to redirect the player directly to the game page. Integrating the Wallet API afterward completes the integration.

There are four APIs in total:

2.1 Common Conventions

Response fields are always named in snake_case (for example, temporary_key, redirect_url, currency_code).

All responses are wrapped in a unified envelope:

json
{
  "code": 0,
  "message": "success",
  "data": { /* Actual business payload; see each API for its structure */ }
}
  • code == 0 indicates success; the business data is in the data field.
  • code != 0 indicates failure; refer to message.

Common error code examples:

codemessageDescription
10000authentication failed / missing body-hash in metadataSignature or header is incorrect
10020ticket_id is requiredMissing required field
10080internal server errorInternal server error

For the complete error reference, see Common Integration Errors.

Next, read the HMAC Signing Flow. All APIs (including GET) require a correct signature to be called successfully.

BFX EXCHANGE · BE THE GAME CHANGER