Affiliate integration

This is the page you send a traffic seller or affiliate network. They get a tracking link. We post back when a player joins or makes a first deposit. This is not the payments SDK.

iGaming / online casino S2S postback CPA on FTD Bearer aff_sk_live_ USD

Overview

AURUM is an online casino. Partners send visitors. We attribute the last click for 30 days, then tell their tracker when that visitor becomes a player and when the first deposit captures.

Piece	Who uses it	URL
Tracking link	Ads / affiliate	`/go/CODE?clickid=`
Postback	We call them	Their tracker URL
Partner API	Their server	`/api/v1/affiliate`
Partner desk	Them, in a browser	/affiliates
Staff CRM	AURUM only	/crm · Affiliates

What you say on the call

You want tracked traffic with integration. Pay on first deposit, not on clicks.

Create them in CRM → Affiliates. Copy their code, password, API key.
They activate the key once (curl example below, any HTTPS client is fine).
Send this page plus their tracking link.
They send their postback URL.
Paste it on the partner desk, click Send test. Their tracker must show a test hit.
They go live. You pay from FTDs in CRM, not from “we sent 10k clicks.”

If they cannot take a postback, they are a media buy only. Give them the lobby URL with ?utm_source= and do not use this API.

How it works

1 · CLICKThey send the player to /go/CODE?clickid=. We store the click and set a cookie.

2 · JOINPlayer registers. We fire registration and attach the click to the account.

3 · FTDFirst captured deposit. We fire ftd and pay the CPA you set.

4 · DEPOSITEvery captured deposit also fires deposit for revshare if you use it.

Tracking links

Replace YOURCODE with the partner code from CRM. Their tracker fills {CLICKID}.

Standard

https://aurum-casino.com/go/YOURCODE?clickid={CLICKID}&sub1={SUBID}

Open Join

https://aurum-casino.com/go/YOURCODE?clickid={CLICKID}&sub1={SUBID}&to=join

Lobby query (same cookie)

https://aurum-casino.com/?aff=YOURCODE&clickid={CLICKID}&sub1={SUBID}

Accepted tags: clickid / click_id / cn, sub1–sub5, subid.

Events we fire

Event	When	Typical pay
`registration`	New account, attributed to the last click	Usually $0
`ftd`	First captured deposit only	CPA (seed is $50)
`deposit`	Every captured deposit, including the first	Flat or % if you set it

Their tracker should credit CPA on event=ftd and status=1.

Postback we send them

They give us a URL. We replace macros and call it (GET by default, POST form body optional).

https://their-tracker.com/postback?clickid={clickid}&payout={payout}&status={status}&event={event}

Macro	Meaning
`{clickid}`	Their click id, or our clk_ id if they sent none
`{sub1}`	Sub id from the click
`{sub2}`	Sub id from the click
`{sub3}`	Sub id from the click
`{sub4}`	Sub id from the click
`{sub5}`	Sub id from the click
`{event}`	registration, ftd, or deposit
`{status}`	1 approved · 2 pending
`{status_name}`	approved / pending / rejected
`{payout}`	What we owe them for this event
`{amount}`	Player deposit amount
`{currency}`	USD
`{player_id}`	AURUM player id
`{txid}`	Our conversion id
`{conversion_id}`	Our conversion id
`{aff}`	Partner tracking code
`{code}`	Partner tracking code

Private and localhost URLs are rejected. We mark each conversion sent, failed, or skipped (no URL yet).

Tracker recipes

Swap the host. Keep our macros.

Custom GET

https://YOUR-TRACKER/postback?clickid={clickid}&payout={payout}&status={status}&event={event}

Binom

https://YOUR-BINOM/click.php?cnv_id={clickid}&payout={payout}&event={event}

Keitaro

https://YOUR-KEITARO/postback?subid={clickid}&payout={payout}&status={status}&from={event}

Voluum

https://YOUR-VOLUUM/postback?cid={clickid}&payout={payout}&et={event}

Affise

https://offers.YOUR-AFFISE.com/postback?clickid={clickid}&sum={payout}&goal={event}

BeMob

https://YOUR-BEMOB/postback?cid={clickid}&payout={payout}&status={status}

Activate the key

New partners are not live until the key is checked once. After that, /go/CODE clicks and FTDs count. Desk login does not activate the key — the Bearer key does.

Curl is an example. Their tracker, PHP, or Python can send the same request.

curl -s https://aurum-casino.com/api/v1/affiliate/me \
  -H "Authorization: Bearer aff_sk_live_…"

Success includes verified: true and live: true. Same check: GET /api/v1/affiliate/verify.

Until that call succeeds, tracking links still open the casino, but we do not store the click and we do not pay FTD.

Authentication

Partner API uses a key issued once when staff create the partner. Rotate it in CRM if they lose it.

Authorization: Bearer aff_sk_live_…

The payments SDK is not used here. Raw HTTPS is correct.

Partner API

Base https://aurum-casino.com/api/v1/affiliate · version 2026-10-21

Method	Path	Auth	Purpose
GET	`/health`	No	Liveness
GET	`/openapi.json`	No	Machine spec
GET	`/templates`	Optional	Links and tracker recipes
GET	`/me`	Yes	Profile. First success verifies the key
GET	`/verify`	Yes	Activate the key so traffic counts
GET	`/stats?days=7`	Yes	Clicks, joins, FTDs, payout
GET	`/clicks`	Yes	Recent clicks
POST	`/clicks`	Yes	Register a click from their server
GET	`/conversions?event=ftd`	Yes	Conversions
GET	`/link`	Yes	Build a tracking URL
GET	`/packet`	Yes	Deal packet for this partner
GET	`/postback`	Yes	Current postback URL
POST	`/postback`	Yes	Set postback URL
POST	`/postback/test`	Yes	Fire a test hit

Response shape

{
  "ok": true,
  "api": "aurum-affiliate",
  "api_version": "2026-10-21",
  "data": {}
}

Stats

curl -s https://aurum-casino.com/api/v1/affiliate/stats?days=7 \
  -H "Authorization: Bearer aff_sk_live_…"

Register a click (S2S)

curl -s -X POST https://aurum-casino.com/api/v1/affiliate/clicks \
  -H "Authorization: Bearer aff_sk_live_…" \
  -H "Content-Type: application/json" \
  -d "{\"clickid\":\"abc123\",\"sub1\":\"fb\"}"

Set postback

curl -s -X POST https://aurum-casino.com/api/v1/affiliate/postback \
  -H "Authorization: Bearer aff_sk_live_…" \
  -H "Content-Type: application/json" \
  -d "{\"url\":\"https://tracker.example/pb?clickid={clickid}&payout={payout}&event={event}\",\"method\":\"GET\"}"

Errors

{
  "ok": false,
  "api": "aurum-affiliate",
  "api_version": "2026-10-21",
  "error": { "code": "unauthorized", "message": "Provide Authorization: Bearer aff_sk_live_..." }
}

Common codes: unauthorized, paused, unknown_code, postback_failed, bad_request.

Send this packet

Copy, fill the code, email it after the call.

Offer:            AURUM Casino
Vertical:         iGaming / online casino
Website:          https://aurum-casino.com
Docs:             https://aurum-casino.com/integration
Partner desk:     https://aurum-casino.com/affiliates
Your code:        YOURCODE
Pay model:        CPA on FTD
FTD CPA:          $50.00 USD
Tracking:         https://aurum-casino.com/go/YOURCODE?clickid={CLICKID}&sub1={SUBID}
Join landing:     https://aurum-casino.com/go/YOURCODE?clickid={CLICKID}&to=join
Activate key:     curl -s https://aurum-casino.com/api/v1/affiliate/me -H "Authorization: Bearer aff_sk_live_…"
Live rule:        clicks and FTDs count only after /me returns verified:true
Events we fire:   registration, ftd, deposit
Postback macros:  {clickid} {event} {status} {payout} {amount} {player_id} {txid} {sub1}
Status:           1 = approved
Partner API:      https://aurum-casino.com/api/v1/affiliate
Auth:             Bearer aff_sk_live_…
No payments SDK. This is tracking only.