Build Secure RushPlay Gaming Platform

RUSHPLAY – FREELANCER BUILD BRIEF Tagline: Play. Win. Repeat. Build RushPlay from scratch as a complete, secure, scalable, mobile-first play-and-earn gaming platform. Deliver a fully functional product, not a prototype, mockup, or interface with fake data. 1. TECHNOLOGY Use Next.js, React, TypeScript, Tailwind CSS, PostgreSQL/Supabase, secure server-side APIs, and a responsive UI. Set up the database, authentication, source-code repository, staging and production environments, logging, backups, and deployment documentation. 2. ACCOUNTS Implement registration, login, password reset, profiles, persistent game progress, wallet, transaction history, referrals, achievements, and a personal dashboard. 3. GAME LEVELS Coins are the platform's internal game currency. Implement these exact levels, entry fees, and rewards: Level: Entry/Reward (coins) 1: 0/0 2: 0/0 3: 10/15 4: 15/25 5: 20/30 6: 30/55 7: 40/75 8: 50/90 9: 70/130 10: 100/200 11: 150/350 12: 180/400 13: 200/450 14: 250/600 15: 300/750 16: 350/850 17: 400/1000 18: 450/1200 19: 500/1500 20: 700/2000 21: 750/2200 22: 800/2500 23: 830/2650 24: 850/2800 25: 900/3000 26: 1000/3500 27: 1200/4500 28: 1500/6000 29: 1700/7500 30: 2000/10000 31: 2500/12000 32: 3000/15000 33: 4000/17000 34: 5000/20000 35: 6000/25000 36: 7000/30000 37: 8000/35000 38: 9000/40000 39: 10000/45000 40: 11000/50000 41: 13000/65000 42: 15000/70000 43: 20000/85000 44: 22000/92000 45: 25000/100000 Levels 1–2 are free with zero rewards. A player must pass a level before unlocking the next; skipping is prohibited. Default pass mark is 90%, configurable by admin. Deduct paid entry fees when a valid attempt begins. Failed attempts lose the fee; successful attempts receive the configured reward exactly once. Prevent duplicate rewards and repeated deductions. Support unlimited future levels beyond Level 45, configurable through the admin panel without inventing fees or rewards. 4. QUESTIONS AND NO-REPEAT RULE Build a scalable question bank designed to grow to 100,000–1,000,000+ validated questions. Never claim questions exist unless they are actually imported, validated, and available. Include bulk import/generation, review, difficulty and category tags, duplicate detection, and question-bank statistics. Topics must include advanced logic, difficult mathematics, number patterns, deduction, probability, combinatorics, verbal and spatial reasoning, coding logic, algorithms, multi-step riddles, memory, science reasoning, and strategy. Difficulty must rise substantially at higher levels. Absolute no-repeat: Never show a user any question previously presented to that user, even after a failed attempt or across levels, sessions, practice, daily challenges, or future modes. Record question delivery permanently in the database and exclude all previously delivered questions during server-side selection. Enforce a unique user-question history constraint. Detect near-duplicates; changing wording or numbers must not bypass the rule. If no unseen question is available, do not repeat one; import/create and validate new questions or display a clear message. 5. GAME ENGINE Implement secure server-side question selection, answer checking, scoring, timing, attempts, progression, fee deduction, reward crediting, and results. Do not expose answers before completion or trust client-side scores and balances. Use atomic database transactions and idempotency controls. 6. COINS AND PAYMENTS Fixed conversion: 100 coins = ₦1,000; 1 coin = ₦10. Minimum deposit: ₦3,000, equivalent to 300 coins before charges. Integrate a suitable payment gateway, verify transactions server-side, process webhooks securely, and credit only confirmed deposits. Maintain a complete, auditable wallet ledger. 7. WITHDRAWALS Support Trust Wallet only, with network selection and wallet-address entry. Minimum withdrawal is the equivalent of US$10, calculated using an admin-configurable exchange rate recorded for each transaction. Deduct a 5% fee from the gross withdrawal and clearly show gross amount, fee, and net amount. Include request, review, processing, success, and failure statuses. Never mark a withdrawal completed without confirmed payment. Prevent duplicate requests and payouts. 8. REFERRALS Generate unique referral codes and track referred users. Pay a single-tier 5% commission on qualifying, verified deposits. Prevent self-referrals, duplicate commissions, and commissions on failed or reversed transactions. Display referral statistics and earnings. 9. ENGAGEMENT Add daily challenges, streaks, achievements, personal bests, leaderboards, and optional timed events. All game modes must obey the absolute no-repeat rule and use the same secure wallet and scoring logic. 10. DESIGN Create a premium, modern, fast, mobile-first experience for Android, iPhone, tablets, and desktops. Dashboard must show coin balance, Play Now, Continue, current/next level, daily challenge, Add Funds, Withdraw, recent results, referrals, and leaderboard. Use clear navigation, readable text, attractive game visuals, loading states, and useful error messages. Avoid clutter, excessive copy, fake statistics, and nonfunctional buttons. 11. ADMIN PANEL Provide role-based admin access to manage users, levels, fees, rewards, pass marks, questions, imports, validation, duplicate checks, challenges, deposits, withdrawals, referrals, exchange rates, platform settings, and audit logs. Show actual question counts, usage, pass rates, revenue, payouts, and other real platform metrics. Log all manual balance adjustments. 12. SECURITY AND QUALITY Validate all inputs server-side. Protect authentication, APIs, database access, payment webhooks, balances, and personal data. Add rate limits, access controls, error monitoring, backups, and recovery procedures. Use automated tests for progression, fees, rewards, no-repeat enforcement, referrals, deposits, withdrawals, concurrency, and duplicate transaction prevention. 13. ACCEPTANCE AND HANDOVER Before sign-off, demonstrate c