LotteryV2/website/Areas/Millions/Controllers/HomeController.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Globalization;
using System.Threading;
using System.Threading.Tasks;
using LotteryWebApp.Common;
using LotteryWebApp.Extensions;
using LotteryWebApp.Languages;
using LotteryWebApp.Models;
using LotteryWebApp.Service;
using Microsoft.AspNetCore.Hosting;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Configuration;
using Newtonsoft.Json;
using LotteryWebApp.Controllers;

namespace LotteryWebApp.Areas.Millions.Controllers
{
    [Area("Millions")]
    [ResponseCache(Duration = 0, Location = ResponseCacheLocation.None, NoStore = true)]
    public class HomeController : BaseController
    {
        private static readonly log4net.ILog log = log4net.LogManager.GetLogger(typeof(Program));
        private const string FreeTicketAutoCheckSessionKey = "Millions.FreeTicket.AutoChecked";
        private const string FreeTicketPromotionCodeSessionKey = "Millions.FreeTicket.PromotionCode";
        private const string FreeTicketTransactionSessionKey = "Millions.FreeTicket.TransactionId";
        private const string PendingTicketTransactionSessionKey = "Millions.PendingTicket.TransactionId";
        private const string OtpVerifiedTransactionSessionKey = "Millions.OTP.VerifiedTransactionId";

        IConfiguration configuration;
        private readonly IWebHostEnvironment webHostEnvironment;
        APIFunctions api = new APIFunctions();

        public HomeController(IConfiguration _configuration, IWebHostEnvironment hostEnvironment)
        {
            configuration = _configuration;
            webHostEnvironment = hostEnvironment;
        }

        public String GetParameter(String key)
        {
            return configuration.GetSection(key).Value;
        }

        public async Task<IActionResult> Index(
            string termType,
            String uuid,
            String mcuid,
            String phonenumber,
            String token
        )
        {
            HomeIndex_ViewModel model = new HomeIndex_ViewModel();
            try
            {

                CultureInfo currentCulture = Thread.CurrentThread.CurrentCulture;
                String lang = currentCulture.Name;

                String msisdnAuto = null;

                if (!CheckAuthToken())
                {
                    if (token != null)
                    {
                        AutoLoginRequest autoLoginRequest = new AutoLoginRequest { token = token };
                        AutoLoginResponse autoLoginResponse = await api.AutoLoginApiAsync(configuration, autoLoginRequest);

                        if (autoLoginResponse.code == Code.SUCCESS_CODE)
                        {
                            string msisdnReal = validateMsisdn(autoLoginResponse.data.msisdn.Substring(1));
                            if (msisdnReal == "") return RedirectToAction("Login", "Account", new { area = "" });

                            CheckAccountRequest checkAccountRequest = new CheckAccountRequest
                            {
                                msisdn = msisdnReal,
                                channel = Constants.WEB_CHANNEL,
                                language = lang == "en" ? "0" : "1"
                            };
                            CheckAccountResponse checkAccountResponse = api.CheckAccountApi(configuration, checkAccountRequest);
                            if (checkAccountResponse.status == Code.SUCCESS)
                            {
                                string tokenGetReal = checkAccountResponse.token;
                                HttpContext.Session.SetComplexData("msisdn", msisdnReal);
                                CreateAuthToken();
                                HttpContext.Session.SetComplexData("token", tokenGetReal);

                                UserGetProfileRequest userGetProfileRequest = new UserGetProfileRequest { users = msisdnReal, token = tokenGetReal };
                                Profile profileGet = api.UserLoadProfileApi(configuration, userGetProfileRequest);
                                HttpContext.Session.SetComplexData("profile", profileGet);

                                UserStatusRequest userStatusRequest = new UserStatusRequest { users = msisdnReal, token = tokenGetReal };
                                UserStatus userStatusGet = api.GetUserStatusApi(configuration, userStatusRequest);
                                HttpContext.Session.SetComplexData("userStatus", userStatusGet);
                            }
                            else
                            {
                                return RedirectToAction("Login", "Account", new { area = "" });
                            }
                        }
                    }
                    else if (uuid != null)
                    {
                        String res = await CheckAutoLogin(log, uuid);
                        if (res != null)
                        {
                            dynamic json = JsonConvert.DeserializeObject(res);
                            if (json["code"] == "200" && json["errorCode"] == "200")
                            {
                                msisdnAuto = json["data"]["msisdn"];
                            }
                        }

                        String msisdnDetect = validateMsisdn(msisdnAuto.Substring(1));
                        if (msisdnDetect != "")
                        {
                            RegisterRequest request = new RegisterRequest { Msisdn = msisdnDetect };
                            RegisterResponse reset = api.UserForgotPasswordApi(configuration, request);
                            if (reset.status == Code.SUCCESS)
                            {
                                HttpContext.Session.Remove("regInfos");
                                HttpContext.Session.SetComplexData("msisdn", msisdnDetect);
                                return RedirectToAction("Login", "Account", new { area = "", step = 2 });
                            }
                        }
                        return RedirectToAction("Login", "Account", new { area = "" });
                    }
                    else if (phonenumber != null)
                    {
                        // simplified or same logic as original
                        return RedirectToAction("Login", "Account", new { area = "" });
                    }
                    else
                    {
                        // If no token/uuid and not auth, verify existing session token
                        var savedToken = HttpContext.Session.GetString("token");
                        if (string.IsNullOrEmpty(savedToken))
                        {
                            return RedirectToAction("Login", "Account", new { area = "" });
                        }
                    }
                }

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");

                model.termType = termType != null ? termType : Constants.Millions_CODE;
                model.userStatus = userStatus;
                model.profile = profile;
                model.listTerm = new List<Term>();

                String tokenGet = HttpContext.Session.GetComplexData<String>("token");
                String fromDate = DateTime.Now.AddDays(-2).ToString("dd/MM/yyyy");
                String toDate = DateTime.Now.ToString("dd/MM/yyyy");

                // Get Top Winner
                GetTopWinnerRequest getTopWinnerRequest = new GetTopWinnerRequest { type = lang == "en" ? "0" : "1", token = tokenGet };
                GetTopWininerResponse getTopWininerResponse = api.GetTopWinnerApi(configuration, getTopWinnerRequest);
                if (getTopWininerResponse.responseCode == Code.SUCCESS)
                {
                    model.topWinner = getTopWininerResponse.list;
                    HttpContext.Session.SetComplexData("topWinner", model.topWinner);
                }

                // Get Term Results
                //ResultOfTermRequest resultOfTermRequest = new ResultOfTermRequest
                //{
                //    gameId = model.termType,
                //    token = tokenGet,
                //    type = Constants.TERM_HAS_NOT_RESULT_TYPE,
                //    order = Constants.DECS,
                //    fromDate = fromDate,
                //    toDate = toDate,
                //    rowsOnPage = Constants.ROW_ON_PAGE,
                //    seqPage = "1",
                //    id = Constants.ALL_DATA
                //};

                //ResultOfTermResponse result = api.GetResultOfTermApi(configuration, resultOfTermRequest);
                //if (result.responseCode == Code.SESSION_EXPIRED)
                //{
                //     return RedirectToAction("Login", "Account", new { area = "" });
                //}
                //else if (result.responseCode == Code.SUCCESS)
                //{
                //    model.listTerm = result.listTerm;
                //}

                if (!string.IsNullOrEmpty(termType))
                {
                     HttpContext.Session.SetString("termType", termType);
                }
            }
            catch (Exception ex)
            {
                log.Error(ex);
                return RedirectToAction("Login", "Account", new { area = "" });
            }

            return View(model);
        }

        public async Task<IActionResult> GameHome(string termType)
        {
            HomeIndex_ViewModel model = new HomeIndex_ViewModel();
            try
            {
               var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    return RedirectToAction("Login", "Account", new { area = "" });
                }

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");

                model.termType = termType != null ? termType : Constants.Millions_CODE;
                model.userStatus = userStatus;
                model.profile = profile;
                model.listTerm = new List<Term>();

                if (!string.IsNullOrEmpty(termType))
                {
                     HttpContext.Session.SetString("termType", termType);
                }

                // Get Term Results for Jackpot
                string cachedBolet = HttpContext.Session.GetString("bolet");
                if (!string.IsNullOrEmpty(cachedBolet))
                {
                    model.bolet = cachedBolet;
                    model.lastResult = HttpContext.Session.GetString("lastResult");
                    model.lastResultDate = HttpContext.Session.GetString("lastResultDate");
                    model.nextRoundDate = HttpContext.Session.GetString("nextRoundDate");
                }
                else
                {
                    String fromDate = DateTime.Now.AddDays(-7).ToString("dd/MM/yyyy");
                    String toDate = DateTime.Now.ToString("dd/MM/yyyy");
                    string lang = CultureInfo.CurrentCulture.Name;
                    string langValue = (lang.StartsWith("en") || lang.StartsWith("fr")) ? "0" : "1";

                    // Get Last Result
                    ResultOfTermRequest resultOfTermRequest = new ResultOfTermRequest
                    {
                        gameId = model.termType,
                        language = langValue,
                        token = token,
                        type = Constants.TERM_HAS_RESULT_TYPE,
                        order = Constants.DECS,
                        fromDate = fromDate,
                        toDate = toDate,
                        rowsOnPage = Constants.ROW_ON_PAGE,
                        seqPage = "1",
                        id = Constants.ALL_DATA
                    };

                    ResultOfTermResponse result = api.GetResultOfTermApi(configuration, resultOfTermRequest);
                    if (result.responseCode == Code.SUCCESS && result.listTerm != null && result.listTerm.Count > 0)
                    {
                        model.bolet = result.listTerm[0].bolet;
                        model.lastResult = result.listTerm[0].result;
                        model.lastResultDate = result.listTerm[0].date_random;
                        model.nextRoundDate = result.listTerm[0].date_end;
                        HttpContext.Session.SetString("nextRoundDate", model.nextRoundDate ?? "");
                        HttpContext.Session.SetString("bolet", model.bolet ?? "");
                        HttpContext.Session.SetString("lastResult", model.lastResult ?? "");
                        HttpContext.Session.SetString("lastResultDate", model.lastResultDate ?? "");
                    }

                    //// Get Next Round
                    //ResultOfTermRequest nextRoundRequest = new ResultOfTermRequest
                    //{
                    //    gameId = model.termType,
                    //    language = langValue,
                    //    token = token,
                    //    type = Constants.TERM_HAS_NOT_RESULT_TYPE,
                    //    order = Constants.ASC,
                    //    fromDate = DateTime.Now.ToString("dd/MM/yyyy"),
                    //    toDate = DateTime.Now.AddDays(7).ToString("dd/MM/yyyy"),
                    //    rowsOnPage = "1",
                    //    seqPage = "1",
                    //    id = Constants.ALL_DATA
                    //};
                    //ResultOfTermResponse nextResult = api.GetResultOfTermApi(configuration, nextRoundRequest);
                    //if (nextResult.responseCode == Code.SUCCESS && nextResult.listTerm != null && nextResult.listTerm.Count > 0)
                    //{
                    //    model.nextRoundDate = nextResult.listTerm[0].date_random;
                    //    HttpContext.Session.SetString("nextRoundDate", model.nextRoundDate ?? "");
                    //}
                }
            }
            catch (Exception ex)
            {
                log.Error(ex);
            }
            return View(model);
        }

        public async Task<IActionResult> FAQ()
        {
            HomeIndex_ViewModel model = new HomeIndex_ViewModel();
            try
            {
               var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    return RedirectToAction("Login", "Account", new { area = "" });
                }

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");
                model.userStatus = userStatus;
                model.profile = profile;
            }
            catch (Exception ex)
            {
                log.Error(ex);
            }
            return View(model);
        }

        public IActionResult More()
        {
            HomeIndex_ViewModel model = new HomeIndex_ViewModel();
            try
            {
               var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    return RedirectToAction("Login", "Account", new { area = "" });
                }

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");
                model.userStatus = userStatus;
                model.profile = profile;

                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn") ?? userStatus?.msisdn ?? profile?.users;
                bool isSub = false;
                if (!string.IsNullOrEmpty(msisdn))
                {
                    var subInfo = api.SubMillionInfoApi(configuration, msisdn);
                    isSub = subInfo != null && subInfo.code == SubMillionCode.SUCCESS && subInfo.data != null && subInfo.data.isSub;
                }
                ViewBag.IsSub = isSub;
            }
            catch (Exception ex)
            {
                log.Error(ex);
            }
            return View(model);
        }

        public IActionResult Profile()
        {
            HomeIndex_ViewModel model = new HomeIndex_ViewModel();
            try
            {
               var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    return RedirectToAction("Login", "Account", new { area = "" });
                }

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");
                model.userStatus = userStatus;
                model.profile = profile;
            }
            catch (Exception ex)
            {
                log.Error(ex);
            }
            return View(model);
        }

        [HttpPost]
        public IActionResult UserUpdateProfile(string fullName, string birthday)
        {
            try
            {
                string msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                string token = HttpContext.Session.GetComplexData<string>("token");

                if (string.IsNullOrEmpty(msisdn) || string.IsNullOrEmpty(token))
                {
                    return Json(new { status = Code.ERROR, message = "Session expired" });
                }

                string birthdayFormat = birthday;
                if (!string.IsNullOrEmpty(birthday) && birthday.Contains("-"))
                {
                    try {
                        birthdayFormat = DateTime.ParseExact(birthday, "yyyy-MM-dd", CultureInfo.InvariantCulture).ToString("dd/MM/yyyy");
                    } catch { }
                }

                UserUpdateProfileRequest request = new UserUpdateProfileRequest
                {
                    users = msisdn,
                    token = token,
                    fullName = fullName,
                    birthday = birthdayFormat
                };

                UserUpdateProfileResponse response = api.UserUpdateProfileApi(configuration, request);
                
                if (response.status == Code.SUCCESS)
                {
                    // Update session profile
                    Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                    if (profile != null)
                    {
                        profile.fullName = fullName;
                        profile.birthday = birthdayFormat;
                        HttpContext.Session.SetComplexData("profile", profile);
                    }
                }

                return Json(response);
            }
            catch (Exception ex)
            {
                log.Error(ex);
                return Json(new { status = Code.ERROR, message = ex.Message });
            }
        }

        public IActionResult Rule()
        {
            HomeIndex_ViewModel model = new HomeIndex_ViewModel();
            try
            {
               var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    return RedirectToAction("Login", "Account", new { area = "" });
                }

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");
                model.userStatus = userStatus;
                model.profile = profile;
            }
            catch (Exception ex)
            {
                log.Error(ex);
            }
            return View(model);
        }

        public IActionResult JackpotResults(string termType, string fromFormatted, string toFormatted)
        {
            HomeIndex_ViewModel model = new HomeIndex_ViewModel();
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    return RedirectToAction("Login", "Account", new { area = "" });
                }

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");
                model.userStatus = userStatus;
                model.profile = profile;
                model.bolet = HttpContext.Session.GetString("bolet");
                model.lastResult = HttpContext.Session.GetString("lastResult");
                model.lastResultDate = HttpContext.Session.GetString("lastResultDate");
                model.nextRoundDate = HttpContext.Session.GetString("nextRoundDate");
                model.termType = !string.IsNullOrEmpty(termType)
                    ? termType
                    : (HttpContext.Session.GetString("termType") ?? Constants.Millions_CODE);

                string lang = CultureInfo.CurrentCulture.Name;
                string langValue = (lang.StartsWith("en") || lang.StartsWith("fr")) ? "0" : "1";

                // Default: last 7 days if filter not provided
                if (string.IsNullOrEmpty(fromFormatted))
                {
                    fromFormatted = DateTime.Now.AddDays(-365).ToString("yyyy-MM-dd");
                }
                if (string.IsNullOrEmpty(toFormatted))
                {
                    toFormatted = DateTime.Now.ToString("yyyy-MM-dd");
                }

                ViewBag.FromFormatted = fromFormatted;
                ViewBag.ToFormatted = toFormatted;

                RpSearchDetailTicketRequest request = new RpSearchDetailTicketRequest
                {
                    requestId = DateTime.Now.Ticks.ToString(),
                    msisdn = "-1",
                    gameId = model.termType,
                    fromDate = DateTime.ParseExact(fromFormatted, "yyyy-MM-dd", CultureInfo.InvariantCulture).ToString("dd/MM/yyyy"),
                    toDate = DateTime.ParseExact(toFormatted, "yyyy-MM-dd", CultureInfo.InvariantCulture).ToString("dd/MM/yyyy"),
                    prize = "JACKPOT",
                    language = langValue,
                    token = token
                };

                RpSearchDetailTicketResponse result = api.RpSearchDetailTicketApi(configuration, request);
                log.Debug("RpSearchDetailTicket response: " + JsonConvert.SerializeObject(result));

                model.listTerm = new List<Term>();
                var winnersByDraw = new Dictionary<string, List<JackpotWinnerItem>>();

                if (result != null && result.responseCode == Code.SUCCESS && result.list != null)
                {
                    // Group winners by randomId -> one draw card per group
                    var grouped = result.list
                        .GroupBy(w => w.randomId)
                        .OrderByDescending(g => ParseDrawDate(g.First().randomDate));

                    foreach (var group in grouped)
                    {
                        var first = group.First();
                        DateTime drawDt = ParseDrawDate(first.randomDate);

                        long totalPrize = 0;
                        foreach (var w in group)
                        {
                            long m;
                            if (long.TryParse(w.moneyWin, out m)) totalPrize += m;
                        }

                        Term term = new Term
                        {
                            id = first.randomId,
                            seq = first.randomId,
                            date_random = drawDt != DateTime.MinValue ? drawDt.ToString("dd/MM/yyyy HH:mm:ss") : first.randomDate,
                            date_start = first.startDate,
                            date_end = first.endDate,
                            result = first.result,
                            money_winner = totalPrize.ToString(),
                            bolet = totalPrize.ToString(),
                            split = group.Count().ToString(),
                            gameId = model.termType
                        };
                        model.listTerm.Add(term);

                        winnersByDraw[first.randomId] = group.ToList();
                    }
                }

                // Cache winners by draw id so JackpotDetail can render them
                HttpContext.Session.SetComplexData("jackpotWinners", winnersByDraw);
            }
            catch (Exception ex)
            {
                log.Error(ex);
                model.listTerm = new List<Term>();
            }
            return View(model);
        }

        private static DateTime ParseDrawDate(string raw)
        {
            if (string.IsNullOrEmpty(raw)) return DateTime.MinValue;
            string[] formats = {
                "M/d/yyyy h:mm:ss tt",
                "MM/dd/yyyy h:mm:ss tt",
                "M/d/yyyy hh:mm:ss tt",
                "dd/MM/yyyy HH:mm:ss",
                "yyyy-MM-dd HH:mm:ss"
            };
            DateTime dt;
            if (DateTime.TryParseExact(raw, formats, CultureInfo.InvariantCulture, DateTimeStyles.None, out dt))
            {
                return dt;
            }
            if (DateTime.TryParse(raw, CultureInfo.InvariantCulture, DateTimeStyles.None, out dt))
            {
                return dt;
            }
            return DateTime.MinValue;
        }

        public IActionResult JackpotDetail(string id, string termType)
        {
            HomeIndex_ViewModel model = new HomeIndex_ViewModel();
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    return RedirectToAction("Login", "Account", new { area = "" });
                }

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");
                model.userStatus = userStatus;
                model.profile = profile;
                model.bolet = HttpContext.Session.GetString("bolet");
                model.lastResult = HttpContext.Session.GetString("lastResult");
                model.lastResultDate = HttpContext.Session.GetString("lastResultDate");
                model.termType = !string.IsNullOrEmpty(termType)
                    ? termType
                    : (HttpContext.Session.GetString("termType") ?? Constants.Millions_CODE);
                ViewBag.DrawId = id;

                var cache = HttpContext.Session.GetComplexData<Dictionary<string, List<JackpotWinnerItem>>>("jackpotWinners");
                List<JackpotWinnerItem> winners = null;
                if (cache != null && !string.IsNullOrEmpty(id) && cache.ContainsKey(id))
                {
                    winners = cache[id];
                }
                ViewBag.Winners = winners ?? new List<JackpotWinnerItem>();
            }
            catch (Exception ex)
            {
                log.Error(ex);
                ViewBag.Winners = new List<JackpotWinnerItem>();
            }
            return View(model);
        }

        public IActionResult HowToPlay()
        {
            HomeIndex_ViewModel model = new HomeIndex_ViewModel();
            try
            {
               var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    return RedirectToAction("Login", "Account", new { area = "" });
                }

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");
                model.userStatus = userStatus;
                model.profile = profile;
            }
            catch (Exception ex)
            {
                log.Error(ex);
            }
            return View(model);
        }

        public IActionResult Results(string termType, string fromDate, string toDate)
        {
            TermResultHistoryModel model = new TermResultHistoryModel();
            try
            {
               var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    return RedirectToAction("Login", "Account", new { area = "" });
                }

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");
                
                model.termType = termType != null ? termType : (HttpContext.Session.GetString("termType") ?? Constants.Millions_CODE);
                
                // Set default dates if not provided (same as root implementation)
                string fromFormatted = fromDate != null ? fromDate : DateTime.Now.AddDays(-7).ToString("yyyy-MM-dd");
                string toFormatted = toDate != null ? toDate : DateTime.Now.ToString("yyyy-MM-dd");

                model.fromDate = fromFormatted;
                model.toDate = toFormatted;

                // Load initial results
                ResultOfTermRequest resultOfTermRequest = new ResultOfTermRequest
                {
                    gameId = model.termType,
                    token = token,
                    type = Constants.TERM_HAS_RESULT_TYPE,
                    order = Constants.DECS,
                    fromDate = DateTime.ParseExact(fromFormatted, "yyyy-MM-dd", CultureInfo.InvariantCulture).ToString("dd/MM/yyyy"),
                    toDate = DateTime.ParseExact(toFormatted, "yyyy-MM-dd", CultureInfo.InvariantCulture).ToString("dd/MM/yyyy"),
                    rowsOnPage = Constants.ROW_ON_PAGE,
                    seqPage = "1",
                    id = Constants.ALL_DATA
                };

                ResultOfTermResponse result = api.GetResultOfTermApi(configuration, resultOfTermRequest);
                if (result.responseCode == Code.SUCCESS)
                {
                    model.listTerm = result.listTerm ?? new List<Term>();
                }
                else
                {
                    model.listTerm = new List<Term>();
                }
            }
            catch (Exception ex)
            {
                log.Error(ex);
                model.listTerm = new List<Term>();
            }
            return View(model);
        }

        public IActionResult TermResultHistory(string termType, string fromDate, string toDate)
        {
            TermResultHistoryModel model = new TermResultHistoryModel();
            try
            {
               var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token)) return Json(new { status = "error", message = "Session expired" });

                string fromFormatted = fromDate != null ? fromDate : DateTime.Now.AddDays(-2).ToString("yyyy-MM-dd");
                string toFormatted = toDate != null ? toDate : DateTime.Now.ToString("yyyy-MM-dd");

                model.termType = termType;
                model.fromDate = fromFormatted;
                model.toDate = toFormatted;

                ResultOfTermRequest request = new ResultOfTermRequest
                {
                    gameId = termType,
                    token = token,
                    type = Constants.TERM_HAS_RESULT_TYPE,
                    order = Constants.DECS,
                    fromDate = DateTime.ParseExact(fromFormatted, "yyyy-MM-dd", CultureInfo.InvariantCulture).ToString("dd/MM/yyyy"),
                    toDate = DateTime.ParseExact(toFormatted, "yyyy-MM-dd", CultureInfo.InvariantCulture).ToString("dd/MM/yyyy"),
                    rowsOnPage = Constants.ROW_ON_PAGE,
                    seqPage = "1",
                    id = Constants.ALL_DATA
                };

                ResultOfTermResponse result = api.GetResultOfTermApi(configuration, request);
                if (result.responseCode == Code.SUCCESS)
                {
                    model.listTerm = result.listTerm ?? new List<Term>();
                }
                else
                {
                    model.listTerm = new List<Term>();
                }
            }
            catch (Exception ex)
            {
                log.Error(ex);
                model.listTerm = new List<Term>();
            }
            return PartialView("_TermResultHistoryV2", model);
        }

        public IActionResult TermResultHistoryGrouped(string fromDate, string toDate)
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token)) return Json(new { status = "error", message = "Session expired" });

                string fromFormatted = fromDate != null ? fromDate : DateTime.Now.AddDays(-2).ToString("yyyy-MM-dd");
                string toFormatted = toDate != null ? toDate : DateTime.Now.ToString("yyyy-MM-dd");

                string[] gameIds = { Constants.Millions_CODE };
                var allTerms = new List<Term>();

                foreach (var gid in gameIds)
                {
                    ResultOfTermRequest request = new ResultOfTermRequest
                    {
                        gameId = gid,
                        token = token,
                        type = Constants.TERM_HAS_RESULT_TYPE,
                        order = Constants.DECS,
                        fromDate = DateTime.ParseExact(fromFormatted, "yyyy-MM-dd", CultureInfo.InvariantCulture).ToString("dd/MM/yyyy"),
                        toDate = DateTime.ParseExact(toFormatted, "yyyy-MM-dd", CultureInfo.InvariantCulture).ToString("dd/MM/yyyy"),
                        rowsOnPage = "50", 
                        seqPage = "1",
                        id = Constants.ALL_DATA
                    };

                    ResultOfTermResponse result = api.GetResultOfTermApi(configuration, request);
                    if (result.responseCode == Code.SUCCESS && result.listTerm != null)
                    {
                        allTerms.AddRange(result.listTerm);
                    }
                }

                // Group by date part of date_random
                var grouped = allTerms.GroupBy(x => {
                    DateTime dt;
                    if (DateTime.TryParse(x.date_random, out dt))
                        return dt.Date;
                    return DateTime.MinValue;
                })
                .Where(g => g.Key != DateTime.MinValue)
                .OrderByDescending(g => g.Key)
                .ToList();

                return PartialView("_TermResultHistoryGrouped", grouped);
            }
            catch (Exception ex)
            {
                log.Error(ex);
                return PartialView("_TermResultHistoryGrouped", new List<IGrouping<DateTime, Term>>());
            }
        }

        public IActionResult History(string termType, string status, string seqPage)
        {
            UserTicketHistoryModel model = new UserTicketHistoryModel();
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    return RedirectToAction("Login", "Account", new { area = "" });
                }

                string msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                
                model.termType = termType ?? Constants.Millions_CODE;
                model.status = status ?? Constants.ALL_DATA; // -1 for all, or 0, 1, 2
                model.seqPage = seqPage ?? "1";

                UserTicketRequest request = new UserTicketRequest
                {
                    gameId = model.termType,
                    msisdn = msisdn,
                    token = token,
                    type = model.status,
                    order = Constants.DECS,
                    rowsOnPage = Constants.ROW_ON_PAGE,
                    seqPage = model.seqPage
                };

                UserTicketResponse result = api.GetUserTicketApi(configuration, request);
                if (result.responseCode == Code.SUCCESS)
                {
                    model.listTicket = result.listTicket ?? new List<Ticket>();
                    model.totalPage = result.totalPage;
                }
                else
                {
                    model.listTicket = new List<Ticket>();
                    model.totalPage = "0";
                }
            }
            catch (Exception ex)
            {
                log.Error(ex);
                model.listTicket = new List<Ticket>();
            }
            return View(model);
        }

        public IActionResult TermUserTicketHistory(string termType, string status, string seqPage)
        {
            UserTicketHistoryModel model = new UserTicketHistoryModel();
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token)) return Json(new { status = "error", message = "Session expired" });

                string msisdn = HttpContext.Session.GetComplexData<string>("msisdn");

                model.termType = termType;
                model.status = status;
                model.seqPage = seqPage ?? "1";

                UserTicketRequest request = new UserTicketRequest
                {
                    gameId = termType,
                    msisdn = msisdn,
                    token = token,
                    type = status,
                    order = Constants.DECS,
                    rowsOnPage = Constants.ROW_ON_PAGE,
                    seqPage = model.seqPage
                };

                UserTicketResponse result = api.GetUserTicketApi(configuration, request);
                if (result.responseCode == Code.SUCCESS)
                {
                    model.listTicket = result.listTicket ?? new List<Ticket>();
                    model.totalPage = result.totalPage;
                }
                else
                {
                    model.listTicket = new List<Ticket>();
                    model.totalPage = "0";
                }
            }
            catch (Exception ex)
            {
                log.Error(ex);
                model.listTicket = new List<Ticket>();
            }
            return PartialView("_TermUserTicketHistory", model);
        }

        public IActionResult RewardHistory(string seqPage)
        {
            RewardHistoryModel model = BuildRewardHistory(seqPage, fallbackRedirectOnExpired: true, out IActionResult redirect);
            if (redirect != null) return redirect;
            return View(model);
        }

        public IActionResult RewardHistoryPartial(string seqPage)
        {
            var token = HttpContext.Session.GetComplexData<string>("token");
            if (string.IsNullOrEmpty(token))
                return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });

            RewardHistoryModel model = BuildRewardHistory(seqPage, fallbackRedirectOnExpired: false, out _);
            return PartialView("_RewardHistoryList", model);
        }

        private RewardHistoryModel BuildRewardHistory(string seqPage, bool fallbackRedirectOnExpired, out IActionResult redirect)
        {
            redirect = null;
            RewardHistoryModel model = new RewardHistoryModel
            {
                seqPage = string.IsNullOrEmpty(seqPage) ? "1" : seqPage
            };

            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                if (string.IsNullOrEmpty(token))
                {
                    if (fallbackRedirectOnExpired)
                        redirect = RedirectToAction("Login", "Account", new { area = "" });
                    return model;
                }

                string msisdn = HttpContext.Session.GetComplexData<string>("msisdn");

                TransactionInfoRequest request = new TransactionInfoRequest
                {
                    msisdn = msisdn,
                    token = token,
                    order = Constants.DECS,
                    rowsOnPage = Constants.ROW_ON_PAGE,
                    seqPage = model.seqPage
                };

                TransactionInfoResponse result = api.GetTransactionInfoApi(configuration, request);
                if (result != null && result.responseCode == Code.SUCCESS)
                {
                    model.list = result.list ?? new List<Transaction>();
                    model.totalPage = result.totalPage ?? "0";
                }
            }
            catch (Exception ex)
            {
                log.Error(ex);
            }
            
            return model;
        }

        [HttpPost]
        [ValidateAntiForgeryToken]
        public IActionResult GetFreeTicket(string type)
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                log.Info($"[Millions.GetFreeTicket] START - msisdn={msisdn}");

                if (string.IsNullOrEmpty(token) || string.IsNullOrEmpty(msisdn))
                {
                    log.Info($"[Millions.GetFreeTicket] Session expired - msisdn={msisdn}");
                    return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });
                }

                if (type == "1")
                {
                    if (HttpContext.Session.GetString(FreeTicketAutoCheckSessionKey) == "1")
                    {
                        log.Info($"[Millions.GetFreeTicket] Auto-check skipped for current session - msisdn={msisdn}");
                        return Json(new { responseCode = "", responseMessage = "Auto-check already completed", skipped = true });
                    }

                    // Set before the downstream call to prevent concurrent Home requests
                    // from triggering multiple automatic checks in the same login session.
                    HttpContext.Session.SetString(FreeTicketAutoCheckSessionKey, "1");
                }

                string lang = CultureInfo.CurrentCulture.Name;
                string langValue = (lang.StartsWith("en") || lang.StartsWith("fr")) ? "0" : "1";
                GetFreeTicketRequest request = new GetFreeTicketRequest
                {
                    requestId = Guid.NewGuid().ToString(),
                    gameId = Constants.Millions_CODE,
                    type = type,
                    msisdn = msisdn,
                    language = langValue,
                    token = token
                };

                GetFreeTicketResponse response = api.GetFreeTicketApi(configuration, request);
                HttpContext.Session.Remove(FreeTicketPromotionCodeSessionKey);
                if (!string.IsNullOrWhiteSpace(response?.code))
                {
                    HttpContext.Session.SetString(FreeTicketPromotionCodeSessionKey, response.code.Trim());
                }
                log.Info($"[Millions.GetFreeTicket] Response - code={response?.responseCode}, msg={response?.responseMessage}, voucher={response?.code}");
                return Json(response);
            }
            catch (Exception ex)
            {
                log.Error("[Millions.GetFreeTicket] EXCEPTION", ex);
                return Json(new { responseCode = Code.ERROR, responseMessage = ex.Message });
            }
        }

        [HttpPost]
        [ValidateAntiForgeryToken]
        public IActionResult CheckSub()
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                log.Info($"[Millions.CheckSub] START - msisdn={msisdn}");

                if (string.IsNullOrEmpty(token) || string.IsNullOrEmpty(msisdn))
                {
                    return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });
                }

                SubMillionResponse response = api.SubMillionInfoApi(configuration, msisdn);
                log.Info($"[Millions.CheckSub] Response - msisdn={msisdn}, code={response.code}, msg={response.message}, isSub={response.data?.isSub}");

                if (response.code == SubMillionCode.SUCCESS)
                {
                    return Json(new { responseCode = Code.SUCCESS, isSub = response.data != null && response.data.isSub });
                }
                if (response.code == SubMillionCode.NOT_REGISTERED)
                {
                    return Json(new { responseCode = Code.SUCCESS, isSub = false });
                }
                return Json(new { responseCode = Code.ERROR, responseMessage = response.message, subCode = response.code });
            }
            catch (Exception ex)
            {
                log.Error("[Millions.CheckSub] EXCEPTION", ex);
                return Json(new { responseCode = Code.ERROR, responseMessage = ex.Message });
            }
        }

        [HttpPost]
        [ValidateAntiForgeryToken]
        public IActionResult RegisterSub()
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                log.Info($"[Millions.RegisterSub] START - msisdn={msisdn}");

                if (string.IsNullOrEmpty(token) || string.IsNullOrEmpty(msisdn))
                {
                    return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });
                }

                SubMillionResponse response = api.SubMillionRegisterApi(configuration, msisdn);
                log.Info($"[Millions.RegisterSub] Response - msisdn={msisdn}, code={response.code}, msg={response.message}");

                // code 2 (Already registered) is treated as registered
                if (response.code == SubMillionCode.SUCCESS || response.code == SubMillionCode.ALREADY_REGISTERED)
                {
                    return Json(new { responseCode = Code.SUCCESS, subCode = response.code });
                }
                return Json(new { responseCode = Code.FAILURE, responseMessage = response.message, subCode = response.code });
            }
            catch (Exception ex)
            {
                log.Error("[Millions.RegisterSub] EXCEPTION", ex);
                return Json(new { responseCode = Code.ERROR, responseMessage = ex.Message });
            }
        }

        [HttpPost]
        [ValidateAntiForgeryToken]
        public IActionResult CancelSub()
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                log.Info($"[Millions.CancelSub] START - msisdn={msisdn}");

                if (string.IsNullOrEmpty(token) || string.IsNullOrEmpty(msisdn))
                {
                    return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });
                }

                SubMillionResponse response = api.SubMillionCancelApi(configuration, msisdn);
                log.Info($"[Millions.CancelSub] Response - msisdn={msisdn}, code={response.code}, msg={response.message}");

                // code 0 (Success) or code 6 (Not registered / already canceled) are both treated as success
                if (response.code == SubMillionCode.SUCCESS || response.code == SubMillionCode.NOT_REGISTERED)
                {
                    return Json(new { responseCode = Code.SUCCESS, subCode = response.code });
                }
                return Json(new { responseCode = Code.FAILURE, responseMessage = response.message, subCode = response.code });
            }
            catch (Exception ex)
            {
                log.Error("[Millions.CancelSub] EXCEPTION", ex);
                return Json(new { responseCode = Code.ERROR, responseMessage = ex.Message });
            }
        }

        [HttpPost]
        [ValidateAntiForgeryToken]
        public IActionResult TermResult(string termType)
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                log.Info($"[Millions.TermResult] START - termType={termType}, msisdn={msisdn}");
                if (string.IsNullOrEmpty(token))
                {
                    log.Info($"[Millions.TermResult] Session expired - termType={termType}, msisdn={msisdn}");
                    return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });
                }

                string lang = CultureInfo.CurrentCulture.Name;
                string langValue = (lang.StartsWith("en") || lang.StartsWith("fr")) ? "0" : "1";

                ResultOfTermRequest request = new ResultOfTermRequest
                {
                    gameId = termType,
                    language = langValue,
                    token = token,
                    type = Constants.TERM_HAS_NOT_RESULT_TYPE,
                    order = Constants.DECS,
                    rowsOnPage = "5",
                    seqPage = "1",
                    id = Constants.ALL_DATA
                };

                ResultOfTermResponse result = api.GetResultOfTermApi(configuration, request);
                log.Info($"[Millions.TermResult] Response - termType={termType}, code={result?.responseCode}, msg={result?.responseMessage}, termCount={result?.listTerm?.Count ?? 0}");
                return Json(result);
            }
            catch (Exception ex)
            {
                log.Error($"[Millions.TermResult] EXCEPTION - termType={termType}", ex);
                return Json(new { responseCode = Code.ERROR, responseMessage = ex.Message });
            }
        }

        [HttpPost]
        public IActionResult ConfirmTicketData([FromBody] ConfirmTicketDataRequest request)
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                if (string.IsNullOrEmpty(token)) return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });

                request.token = token;
                request.msisdn = msisdn;
                request.language = CultureInfo.CurrentCulture.Name.StartsWith("en") ? "0" : "1";
                request.requestId = Guid.NewGuid().ToString();

                var sessionPromotionCode = HttpContext.Session.GetString(FreeTicketPromotionCodeSessionKey);
                var isValidPromotionCode = !string.IsNullOrWhiteSpace(request.promotionCode)
                    && string.Equals(request.promotionCode, sessionPromotionCode, StringComparison.Ordinal);
                if (isValidPromotionCode)
                {
                    request.gameId = Constants.Millions_CODE;
                    request.channelPayment = Constants.BASIC_WALLET_TICKET;
                }
                else
                {
                    request.promotionCode = null;
                }

                // DEBUG: Log request data
                var ticketDebug = request.ticket != null ? string.Join("; ", request.ticket.Select(t => $"code={t.code}, money={t.money}")) : "NULL";
                log.Info($"[BuyTicketV2.Prepare] gameId={request.gameId}, msisdn={request.msisdn}, tickets=[{ticketDebug}]");

                ConfirmTicketDataResponse response = api.BuyTicketV2Api(configuration, request);

                if (response.responseCode == Code.SUCCESS && !string.IsNullOrWhiteSpace(response.transId))
                {
                    HttpContext.Session.SetString(PendingTicketTransactionSessionKey, response.transId);
                    HttpContext.Session.Remove(OtpVerifiedTransactionSessionKey);
                }

                if (isValidPromotionCode && response.responseCode == Code.SUCCESS && !string.IsNullOrWhiteSpace(response.transId))
                {
                    HttpContext.Session.SetString(FreeTicketTransactionSessionKey, response.transId);
                }
                
                // DEBUG: Log response
                log.Info($"[BuyTicketV2.Prepare] Response: code={response.responseCode}, msg={response.responseMessage}, transId={response.transId}");
                
                return Json(response);
            }
            catch (Exception ex)
            {
                log.Error(ex);
                return Json(new { responseCode = Code.ERROR, responseMessage = ex.Message });
            }
        }

        [HttpPost]
        public IActionResult ConfirmOTP([FromBody] ConfirmOTPRequest request)
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                if (string.IsNullOrEmpty(token)) return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });

                request.token = token;
                request.msisdn = msisdn;

                var transactionId = request.transIdByTicket;
                var pendingTransactionId = HttpContext.Session.GetString(PendingTicketTransactionSessionKey);
                if (string.IsNullOrWhiteSpace(transactionId)
                    || !string.Equals(transactionId, pendingTransactionId, StringComparison.Ordinal))
                {
                    return Json(new { responseCode = "4", responseMessage = GetLangFromCode("4") });
                }

                // This value is only used by the website to bind OTP verification
                // to the prepared transaction; it must not be sent to the OTP API.
                request.transIdByTicket = null;

                ConfirmOTPResponse response = api.ConfirmOTPApi(configuration, request);
                if (response.responseCode == Code.SUCCESS)
                {
                    HttpContext.Session.SetString(OtpVerifiedTransactionSessionKey, transactionId);
                }
                return Json(response);
            }
            catch (Exception ex)
            {
                log.Error(ex);
                return Json(new { responseCode = Code.ERROR, responseMessage = ex.Message });
            }
        }

        [HttpPost]
        public IActionResult SendOTP()
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                if (string.IsNullOrEmpty(token)) return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });

                SendOTPRequest request = new SendOTPRequest
                {
                    msisdn = msisdn,
                    token = token,
                    language = CultureInfo.CurrentCulture.Name.StartsWith("en") ? "0" : "1",
                    channel = configuration.GetSection("channel").Value
                };

                SendOTPResponse response = api.SendOTPApi(configuration, request);
                if (response.responseCode == Code.SUCCESS)
                {
                    HttpContext.Session.Remove(OtpVerifiedTransactionSessionKey);
                }
                return Json(response);
            }
            catch (Exception ex)
            {
                log.Error(ex);
                return Json(new { responseCode = Code.ERROR, responseMessage = ex.Message });
            }
        }

        [HttpPost]
        public IActionResult ConfirmBuyingTicketV2([FromBody] ConfirmBuyingTicketRequest request)
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                if (string.IsNullOrEmpty(token)) return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });

                var isWalletPayment = request.channelPayment == Constants.NATCASH_WALLET_TICKET;
                var freeTicketTransactionId = HttpContext.Session.GetString(FreeTicketTransactionSessionKey);
                var isFreeTicketTransaction = !string.IsNullOrWhiteSpace(request.transIdByTicket)
                    && string.Equals(request.transIdByTicket, freeTicketTransactionId, StringComparison.Ordinal);

                // Main-account and promotion purchases must have completed the
                // separate ConfirmOTP request for this exact prepared transaction.
                if (!isWalletPayment)
                {
                    var otpVerifiedTransactionId = HttpContext.Session.GetString(OtpVerifiedTransactionSessionKey);
                    if (string.IsNullOrWhiteSpace(request.transIdByTicket)
                        || !string.Equals(request.transIdByTicket, otpVerifiedTransactionId, StringComparison.Ordinal))
                    {
                        return Json(new { responseCode = "31", responseMessage = GetLangFromCode("31") });
                    }

                    HttpContext.Session.Remove(OtpVerifiedTransactionSessionKey);
                }

                // Step 2: Proceed to Confirm buying
                request.token = token;
                request.msisdn = msisdn;
                request.requestId = Guid.NewGuid().ToString();
                request.language = CultureInfo.CurrentCulture.Name.StartsWith("en") ? "0" : "1";
                request.channel = configuration.GetSection("channel").Value;

                request.gameId = Constants.Millions_CODE;

                ConfirmBuyingTicketResponse response;
                if (isWalletPayment)
                {
                    response = api.ConfirmBuyingTicketV2Api(
                        configuration,
                        request,
                        Constants.WALLET_PAYMENT_CHANNEL,
                        request.walletPin);
                }
                else if (isFreeTicketTransaction)
                {
                    // Promotion transactions are created by BuyTicketV2 and must
                    // be completed by the matching V2 confirmation endpoint.
                    response = api.ConfirmBuyingTicketV2Api(configuration, request);
                }
                else
                {
                    response = api.ConfirmBuyingTicketApi(configuration, request);
                }
                if (response.responseCode == Code.SUCCESS)
                {
                    if (isFreeTicketTransaction)
                    {
                        HttpContext.Session.Remove(FreeTicketPromotionCodeSessionKey);
                        HttpContext.Session.Remove(FreeTicketTransactionSessionKey);
                    }
                    UpdateUserStatus(msisdn, token);
                }
                return Json(response);
            }
            catch (Exception ex)
            {
                log.Error(ex);
                return Json(new { responseCode = Code.ERROR, responseMessage = ex.Message });
            }
        }

        [HttpPost]
        public IActionResult ConfirmBuyingTicket([FromBody] ConfirmBuyingTicketRequest request)
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                if (string.IsNullOrEmpty(token)) return Json(new { responseCode = Code.SESSION_EXPIRED, responseMessage = "Session expired" });

                request.token = token;
                request.msisdn = msisdn;
                request.requestId = Guid.NewGuid().ToString();
                request.language = CultureInfo.CurrentCulture.Name.StartsWith("en") ? "0" : "1";
                request.channel = configuration.GetSection("channel").Value;

                ConfirmBuyingTicketResponse response = api.ConfirmBuyingTicketApi(configuration, request);
                if (response.responseCode == Code.SUCCESS)
                {
                    UpdateUserStatus(msisdn, token);
                }
                return Json(new { 
                    responseCode = response.responseCode, 
                    responseMessage = response.responseMessage,
                    transId = response.transId,
                    orderId = response.orderId,
                    userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus")
                });
            }
            catch (Exception ex)
            {
                log.Error(ex);
                return Json(new { responseCode = Code.ERROR, responseMessage = ex.Message });
            }
        }

        public IActionResult BuyTicket(string termType)
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                log.Info($"[Millions.BuyTicket] START - termType={termType}, msisdn={msisdn}");
                if (string.IsNullOrEmpty(token) && !User.Identity.IsAuthenticated)
                {
                    log.Info($"[Millions.BuyTicket] Redirect login - missing token, termType={termType}, msisdn={msisdn}");
                    return RedirectToAction("Login", "Account", new { area = "" });
                }
                
                HomeIndex_ViewModel model = new HomeIndex_ViewModel();
                model.termType = termType ?? Constants.Millions_CODE;
                log.Info($"[Millions.BuyTicket] Check active term - gameId={model.termType}, msisdn={msisdn}");

                Profile profile = HttpContext.Session.GetComplexData<Profile>("profile");
                UserStatus userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");
                model.userStatus = userStatus;
                model.profile = profile;
                
                // Get active term
                ResultOfTermRequest request = new ResultOfTermRequest
                {
                    gameId = model.termType,
                    token = token,
                    type = Constants.TERM_HAS_NOT_RESULT_TYPE,
                    order = Constants.DECS,
                    rowsOnPage = "1",
                    seqPage = "1",
                    id = Constants.ALL_DATA
                };

                ResultOfTermResponse result = api.GetResultOfTermApi(configuration, request);
                log.Info($"[Millions.BuyTicket] Active term response - gameId={model.termType}, code={result?.responseCode}, msg={result?.responseMessage}, termCount={result?.listTerm?.Count ?? 0}");
                if (result.responseCode == Code.SUCCESS && result.listTerm != null && result.listTerm.Count > 0)
                {
                    model.listTerm = result.listTerm;
                }
                else
                {
                    model.listTerm = new List<Term>();
                }

                if (model.termType == Constants.PIC10_BIGSMALL_CODE || model.termType == Constants.PIC10_ODDEVEN_CODE)
                {
                    log.Info($"[Millions.BuyTicket] Check past terms - gameId={model.termType}, msisdn={msisdn}");
                    ResultOfTermRequest pastRequest = new ResultOfTermRequest
                    {
                        gameId = model.termType,
                        token = token,
                        type = Constants.TERM_HAS_RESULT_TYPE,
                        order = Constants.DECS,
                        fromDate = DateTime.Now.AddDays(-10).ToString("dd/MM/yyyy"), 
                        toDate = DateTime.Now.ToString("dd/MM/yyyy"),
                        rowsOnPage = "5",
                        seqPage = "1",
                        id = Constants.ALL_DATA
                    };

                    ResultOfTermResponse pastResult = api.GetResultOfTermApi(configuration, pastRequest);
                    log.Info($"[Millions.BuyTicket] Past term response - gameId={model.termType}, code={pastResult?.responseCode}, msg={pastResult?.responseMessage}, termCount={pastResult?.listTerm?.Count ?? 0}");
                    if (pastResult.responseCode == Code.SUCCESS && pastResult.listTerm != null)
                    {
                        var pastTerms = pastResult.listTerm.Take(5).ToList();
                        pastTerms.Reverse(); // Display chronological order
                        ViewBag.PastTerms = pastTerms;
                    }
                    else
                    {
                        ViewBag.PastTerms = new List<Term>();
                    }
                }

                log.Info($"[Millions.BuyTicket] END - gameId={model.termType}, activeTermCount={model.listTerm?.Count ?? 0}, msisdn={msisdn}");
                return View(model);
            }
            catch (Exception ex)
            {
                log.Error($"[Millions.BuyTicket] EXCEPTION - termType={termType}", ex);
                return RedirectToAction("GameHome", new { termType = termType });
            }
        }

        public IActionResult TransferWinMoney()
        {
            if (!CheckAuthToken())
            {
                return RedirectToAction("Login", "Account", new { area = "" });
            }
            HomeIndex_ViewModel model = new HomeIndex_ViewModel();
            model.profile = HttpContext.Session.GetComplexData<Profile>("profile");
            model.userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus");
            return View(model);
        }

        [HttpPost]
        public IActionResult ConfirmTransfer(string otp, string phone, string amount, int channelPayment = 1)
        {
            try
            {
                var token = HttpContext.Session.GetComplexData<string>("token");
                var msisdn = HttpContext.Session.GetComplexData<string>("msisdn");
                if (string.IsNullOrEmpty(token)) return Json(new { status = Code.SESSION_EXPIRED, message = "Session expired" });
                var transferChannel = channelPayment == 2
                    ? Constants.NATCASH_WALLET_TRANSFER
                    : Constants.BASIC_WALLET_TRANSFER;

                // Step 1: Verify OTP
                ConfirmOTPRequest otpRequest = new ConfirmOTPRequest
                {
                    otp = otp,
                    msisdn = msisdn,
                    token = token,
                    language = CultureInfo.CurrentCulture.Name.StartsWith("en") ? "0" : "1",
                    channel = configuration.GetSection("channel").Value
                };
                ConfirmOTPResponse otpResponse = api.ConfirmOTPApi(configuration, otpRequest);

                if (otpResponse.responseCode != Code.SUCCESS)
                {
                    return Json(new { status = otpResponse.responseCode, message = otpResponse.responseMessage });
                }

                // Step 2: If OTP success, call Transfer Money Api
                TransferMoneyRequest xferRequest = new TransferMoneyRequest
                {
                    msisdn = msisdn,
                    msisdnReceive = phone,
                    money = amount,
                    otp = otp,
                    token = token,
                    channelPayment = transferChannel,
                    language = CultureInfo.CurrentCulture.Name.StartsWith("en") ? "0" : "1",
                    channel = configuration.GetSection("channel").Value
                };

                TransferMoneyResponse xferResponse = api.TransferMoneyApi(configuration, xferRequest);

                if (xferResponse.responseCode == Code.SUCCESS)
                {
                    UpdateUserStatus(msisdn, token);
                }

                return Json(new { 
                    status = xferResponse.responseCode, 
                    message = xferResponse.responseMessage,
                    paymentCode = xferResponse.paymentCode,
                    responseCode = xferResponse.responseCode,
                    userStatus = HttpContext.Session.GetComplexData<UserStatus>("userStatus")
                });
            }
            catch (Exception ex)
            {
                log.Error(ex);
                return Json(new { status = Code.ERROR, message = ex.Message });
            }
        }

        private void UpdateUserStatus(string msisdn, string token)
        {
            try
            {
                UserStatusRequest userStatusRequest = new UserStatusRequest { users = msisdn, token = token };
                UserStatus userStatusGet = api.GetUserStatusApi(configuration, userStatusRequest);
                if (userStatusGet != null)
                {
                    HttpContext.Session.SetComplexData("userStatus", userStatusGet);
                }
            }
            catch (Exception ex)
            {
                log.Error("UpdateUserStatus Error: " + ex.Message);
            }
        }

        public IActionResult Logout()
        {
            ClearCache();
            return Redirect(GetParameter(Constants.SUB_DOMAIN) + "/Account/Login");
        }
    }
}