Settings & Audit
This section covers your personal admin settings (two-factor authentication) and the operator audit log — an immutable record of every admin action taken on your platform.
Overview
Access your 2FA settings through Settings > 2FA in the sidebar. The Audit Log is available under Audit Logs.
Two-Factor Authentication
Enabling 2FA
- 1
Navigate to Settings > 2FA
View your current 2FA status.
- 2
Click 'Enable 2FA'
The system generates a TOTP secret and displays it as a QR code.
- 3
Scan with authenticator app
Use Google Authenticator, Authy, 1Password, or any TOTP-compatible app to scan the QR code.
- 4
Enter verification code
Type the 6-digit code from your authenticator app to confirm setup.
- 5
Save recovery codes
Download or write down the recovery codes. Store them securely — they're your backup if you lose your authenticator device.
Disabling 2FA
To disable 2FA, go to Settings > 2FA and click "Disable 2FA". You will need to enter a valid 2FA code to confirm disabling.
Warning
Audit Logs
The Audit Log provides a tamper-proof record of every admin action performed on your platform. This is essential for compliance, accountability, and incident investigation.
Audit Log Columns
| Column / Field | Description |
|---|---|
| Timestamp | Exact date and time the action was performed |
| Admin | Which admin user performed the action |
| Resource Type | What was affected: user, bet, withdrawal, bonus, setting, etc. |
| Action | What was done: create, update, delete, approve, reject, login, etc. |
| Changes | JSON diff showing before/after values (click to expand) |
| Status | success or failed |
Filters
Use filters to find specific audit entries:
- Admin — Filter by specific admin user
- Resource Type — Filter by entity type (user, withdrawal, etc.)
- Action — Filter by action type (create, approve, etc.)
- Status — Filter by success or failed
- Date Range — Filter by time period
Using Audit Logs Effectively
Common audit log investigations:
- Who approved this withdrawal?— Filter by resource type "withdrawal" and action "approve"
- What did admin X do today?— Filter by the admin's name and today's date
- Who changed this user's status?— Filter by resource type "user" and action "update", then look at the changes JSON
- Were there any failed actions?— Filter by status "failed" to identify permission issues or errors
Info