API Guide

★ See it in action

What happens after POST /v1/order — this loops automatically, no clicking needed.

1 Get your API key

Send this command to the bot in a private DM, or inside your own dedicated group:

GapikeyCopy

• If it's your first time, a key is generated automatically.
• If you already have one, the same key is shown again.
• The message self-destructs after 2 minutes — copy your key somewhere safe.
• Sent from any other/shared group, the bot deletes your message and DMs you instead, so your key never leaks to other members.

Reset / rotate your key

GapikeyresetCopy

This immediately deactivates your old key and issues a new one. Update it anywhere you had it saved.

2 Authentication

Every request must include these headers:

X-API-Key: YOUR_API_KEY
Content-Type: application/jsonCopy

Missing or invalid keys return 401 Unauthorized.

3 Two ways to order

There's only one endpoint. What it does depends on a single field — whether you include player_id or not:

4 Place an order

This call always responds instantly — it never waits on the supplier. You get an order_id with status pending back immediately, and the real result arrives afterwards — see §6 and §7.

Request body — Normal Voucher Order

{
  "item": "80:1",
  "wallet": "bd",
  "callback_url": "https://yourdomain.com/webhook",
  "metadata": { "your_ref": "INV-1001" }
}Copy

Request body — Auto Top-Up (add player_id)

{
  "item": "80:1",
  "wallet": "bd",
  "player_id": "12345678",
  "callback_url": "https://yourdomain.com/webhook",
  "metadata": { "your_ref": "INV-1001" }
}Copy

The item format

Example: "item": "80:2,160:1" orders 2× the 80 package and 1× the 160 package in a single call — one order_id, one final result for the whole basket.

Instant response — 200 OK

{
  "success": true,
  "order_id": "ORD123456",
  "status": "pending"
}

5 Auto Top-Up fee

Sending player_id adds one small fee per order, on top of the voucher price:

• The fee is folded into the total field of the final result.
• If a voucher fails and gets refunded, the fee is not refunded.
• Normal Voucher Orders have no fee at all — the fee only applies when player_id is sent.

6 Order status & final result

Poll this any time — e.g. if you didn't set a callback_url, or as a backup. Recommended interval: every 3 seconds.

Final response — success

{
  "status": "success",
  "orderid": "ORD123456",
  "player_id": "12345678",
  "player_name": "PlayerName",
  "wallet": "bd",
  "total": 100.50,
  "balance_after": 899.50,
  "due_after": 0.00,
  "fail_reason": null,
  "elapsed_sec": 34.7,
  "timestamp": "2026-07-24T10:00:00Z",
  "metadata": { "your_ref": "INV-1001" },
  "voucher_detail": {
    "api_status": "success",
    "items": [
      {
        "status": "success",
        "code": "BDMB-XXXXXXXX",
        "product": "80UC",
        "unit_price": 50.00,
        "fail_reason": ""
      }
    ],
    "summary": { "total": 1, "success": 1, "consumed": 0, "failed": 0 }
  }
}

On a Normal Voucher Order (no player_id), this same shape comes back — just without player_id/player_name. Read the code straight from voucher_detail.items[].code and hand it to your user to redeem.

Status values

Voucher item status — inside voucher_detail.items[]

7 Callbacks (webhooks)

If you set callback_url, the API POSTs the exact same final-result payload shown in §6 to that URL automatically — no polling needed.

What your endpoint must do

• Respond with any 2xx status code to acknowledge receipt.
• Respond within ~10 seconds.
• Anything else — timeout, non-2xx, connection error — is treated as failed delivery and retried.

Retry timeline (exponential backoff)

Up to 6 attempts, capped at 120s between attempts. After the last failed attempt, fall back to GET /v1/order/{order_id} to fetch the result directly.

8 Telegram notification

Whether the order finishes as Success, Partial, or Failed, the Telegram bot automatically sends you a notification with:

• Order ID
• Player ID & Player Name (Auto Top-Up only)
• Order status
• Package summary
• Voucher status per item
• Total amount & fee
• Wallet balance before / after
• Processing time

This is fully automatic — no setup needed on your end beyond having an API key tied to your Telegram account.

9 Errors & status codes

POST /v1/order only ever validates the request itself — it never returns the order's own success/failure (that comes later, via §6/§7). Error format:

{
  "success": false,
  "message": "Invalid wallet. Valid options: bd, bd_baki, usd, usd_baki"
}

10 Code examples

Same request, three languages. Switch tabs below.

import time
import requests

API_KEY = "YOUR_API_KEY"
BASE_URL = "https://api.gameflexbd.online/v1"

headers = {
    "X-API-Key": API_KEY,
    "Content-Type": "application/json"
}

payload = {
    "item": "80:1",
    "wallet": "bd",
    "player_id": "12345678",          # remove this line for a Normal Voucher Order
    "callback_url": "https://yourdomain.com/webhook",
    "metadata": { "your_ref": "INV-1001" }
}

response = requests.post(f"{BASE_URL}/order", headers=headers, json=payload)
result = response.json()
print(result)

if result.get("success"):
    order_id = result["order_id"]

    while True:
        status = requests.get(f"{BASE_URL}/order/{order_id}", headers=headers).json()
        print(status["status"])

        if status["status"] in ["success", "partial", "failed"]:
            print(status)
            break

        time.sleep(3)Copy

curl -X POST https://api.gameflexbd.online/v1/order \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "item": "80:1",
    "wallet": "bd",
    "player_id": "12345678",
    "callback_url": "https://yourdomain.com/webhook"
  }'Copy

curl -X GET https://api.gameflexbd.online/v1/order/ORD123456 \
  -H "X-API-Key: YOUR_API_KEY"Copy

curl -X POST https://api.gameflexbd.online/v1/order \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "item": "80:2,160:1",
    "wallet": "bd",
    "callback_url": "https://yourdomain.com/webhook"
  }'Copy

import java.net.URI;
import java.net.http.*;
import java.time.Duration;

public class GameFlexOrder {
    static final String API_KEY = "YOUR_API_KEY";
    static final String BASE_URL = "https://api.gameflexbd.online/v1";

    public static void main(String[] args) throws Exception {
        HttpClient client = HttpClient.newHttpClient();

        String body = """
            {
              "item": "80:1",
              "wallet": "bd",
              "player_id": "12345678",
              "callback_url": "https://yourdomain.com/webhook",
              "metadata": {"your_ref": "INV-1001"}
            }""";

        HttpRequest placeOrder = HttpRequest.newBuilder()
            .uri(URI.create(BASE_URL + "/order"))
            .header("X-API-Key", API_KEY)
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(body))
            .build();

        HttpResponse<String> res = client.send(placeOrder, HttpResponse.BodyHandlers.ofString());
        System.out.println(res.body());  // { "success": true, "order_id": "...", "status": "pending" }

        // naive order_id extraction — use a real JSON library (Jackson / Gson) in production
        String orderId = res.body().split("\"order_id\":\"")[1].split("\"")[0];

        while (true) {
            HttpRequest poll = HttpRequest.newBuilder()
                .uri(URI.create(BASE_URL + "/order/" + orderId))
                .header("X-API-Key", API_KEY)
                .GET()
                .build();

            HttpResponse<String> status = client.send(poll, HttpResponse.BodyHandlers.ofString());
            System.out.println(status.body());

            if (status.body().contains("\"success\"") || status.body().contains("\"partial\"") || status.body().contains("\"failed\"")) {
                break;
            }
            Thread.sleep(Duration.ofSeconds(3).toMillis());
        }
    }
}Copy

11 After you place an order

Three ways to get the final result — use whichever fits your integration:

• Callback — set callback_url and the result is POSTed to you automatically (see §7).
• Status check — poll GET /v1/order/{order_id} (see §6).
• Telegram — the bot also sends you the full result automatically (see §8), whether or not you set a callback.