Payouts are enforced by Kaspa's blockchain itself. Not even the operator can touch the pot, block a draw, or pick the winner.
Paste your Kaspa address (where a win should be paid). You'll get a personal entry address whose covenant locks your payout key in.
Kaspa's Toccata upgrade added covenants: spending rules enforced by every node on the network. This raffle is built entirely out of them.
Every entry address is derived from the public covenant contract. Check it yourself.