RNG is fully server-side (Elixir). Uses Enum.shuffle/1 (Fisher-Yates) seeded from OS entropy. Fresh shuffle each hand, not deterministic. Frontend only receives dealt cards, no deck access.