Real-Time NRA Compliance Adapter for a Bulgarian Casino Operator
Strict Bulgarian regulations require every bet, win, and player session to be reported to the National Revenue Agency (NRA) the moment it happens. In just six weeks we delivered a dedicated integration layer that encrypts, signs, and transmits each event without slowing the platform—achieving full certification on the first attempt and giving compliance teams total visibility.
Background & Challenge
- Mandatory real-time reporting of game logs, transactions, and player sessions.
- Encrypted data & complex schemas written in a Bulgarian legal-technical hybrid.
- Event translation needed from platform formats to NRA-specific types.
- Zero gameplay impact tolerated during data capture and transfer.
- Hard go-live deadline tied to regulatory certification.
How We Helped
- Protocol & specification analysis
- Reverse-engineered NRA schemas and collaborated with legal advisors.
- Mapped every platform event to the required NRA type.
- Adapter-service architecture
- Built a Node.js microservice that handles transformation, GPG encryption, signing, and guaranteed delivery with retry/back-off logic.
- Real-time data capture & queuing
- Subscribed to live event streams, buffered in Redis, and batched chronologically for transmission.
- NRA API integration
- Connected to SOAP and REST endpoints, managing tokens, XML formatting, and signature compliance.
- Added logging and alerts for failed transmissions and timeouts.
- Monitoring & audit trail
- Delivered a Grafana dashboard for message status, manual resends, and full log export.
- Integrated Slack notifications for real-time error visibility.
Outcomes & Benefits
- Certified on Schedule: Passed NRA compliance testing and went live on deadline.
- Real-Time Visibility: Live dashboard tracks every message; audits exportable in seconds.
- Zero Gameplay Impact: Buffered, asynchronous delivery keeps game latency unchanged.
- Secure by Design: GPG-encrypted, signed payloads meet NRA encryption mandates.
- Operational Efficiency: Compliance and finance teams no longer rely on manual scripts or spreadsheets.
Tech Stack
- Node.js adapter service
- PostgreSQL event storage & delivery logs
- Redis buffering & retry queues
- GnuPG encryption / signing
- Docker + Kubernetes containerised deployment
- Prometheus + Grafana monitoring & alerting
