Why wouldn't the host just send themselves the key first and then have everyone pull slot machine for them. If you do win it, you are not seeing a penny if you roll from that site.
Generally agree that most services like this would at a minimum log a matching key w/ alert. I'm not going to audit the code but maybe OP has good intentions.