The event that never arrived
Your receiver was briefly unavailable, the sender tried twice, and the event is gone. Nothing is wrong anywhere, and one customer never got their confirmation. This is why the retry policy and the ability to replay past deliveries matter more than any other feature of a webhook implementation.
The event that arrived twice
A slow acknowledgement caused a retry, so the same win event triggered two messages to the same customer. Make every triggered action safe to repeat. Recording the event identifier before acting and ignoring identifiers you have seen is the standard approach and is easy to describe to whoever builds your automation.
The event that arrived in the wrong order
Two rapid updates to the same record can be delivered out of sequence, so an older value overwrites a newer one. Where this matters, use the timestamp inside the payload rather than the arrival time, or fetch the current state through an API call rather than trusting the contents of the message.