2) What kind of reward system would this game have that a) cannot be exploited by players and b) doesn't run afoul of national gambling laws*?


Achievements. While exploitable, they don't matter that much.
Only get rewards from NPC oponents
Give rewards that affect the card game only (IE: New cards)
Get rewards from special events that happen once in a while, like official torneys (somewhat exploitable)

etc