external image

Account security concerns at multiple casinos

Joined
Oct 19, 2006
Location
Southampton, UK
Whenever I hand over my email address, I always use the format [email protected], so that when I recieve spam I know who has sent it, or sold my details, or generally broken their own privacy rules.

Before this year, I'd only ever caught one company out, the BBC of all people. This year I've had a couple of companies selling my details when they shouldn't, and one magazine who admitted a security breach, and gave me a free subscription in compensation.

On top of that however, I have now had spam emails sent to five different addresses that I have only ever used to register at casinos with.

3 were related (same casino software, same spam), and the casino admitted in confidence that it was a breach of security by one of their support staff. At one point the manager of one of the casinos phoned and wanted me to testify in court against that person. I agreed, but haven't heard anything since, despite chasing.

Another was earlier in the week. My email to support was forwarded to security, and the casino guarantees not trading or giving out of email addresses. I will chase this today until I get a satisfactory response.

The final one happened this morning and was the straw which broke the camels back. I have yet to email the casino in question, but it won't be a friendly email.

All five casinos involved are highly reputable, popular casinos. All spam emails are the sort that wouldn't get past the lamest spam filter, and link to sites I've never heard of with way to good to be trusted 500% bonuses to new US players. All casinos guarantee privacy and not to sell or disclose details to third parties.

For now, I'm not going to name names, unless casinomeister thinks that I should. What I want to know is how well I should trust casinos? They have lots of personal details from me, including credit cards, neteller and bank details, and security questions such as my mothers maiden name. I'm getting extremely worried and tempted to phone up most of them to ask for my accounts to be deleted, leaving only a one or two to play at regularly.

I also wanted to bring this to everyone's attention on here, and hopefully to hear from some reps about what security they have in place and vetting of staff to prevent breaches such as these.
 
... I'm not going to name names, unless casinomeister thinks that I should.

I can't speak for the main man but my vote is "Name Them!" If we don't call the name-sellers out then they just do it, take the money, and run. Give them publicity they don't want and maybe they'll see the error of their ways and, perhaps more to the point, others might too.
 
I agree - you seem to have certain proof that these operations are abusing the confidentiality of the email addresses you gave them - expose the buggers!
 
I agree, name and shame. If they are allowed anonymity, they will remain in denial that this is happening. If named, the reputable ones will have an opportunity to mend their procedures. It would only be fair to PM the relevant casino reps, so that they have an opportunity to join in the debate, and alert their management to what has been found.
If you have proof, better still. You are not making wild assumptions, if you have used different E-mail addresses to different casinos, it is easy to spot the sources of the leaks of your E-mail addresses. It may be deliberate, or a scam from a low level employee who sees the opportunity to make a little extra on the side.
Many of us here know that, despite promises, our details are not as secure as they would be at, say, our banks.
One problem with this method of detection is that you cannot use webwallets, as the E-mail address registered at the casino has to be your "real" one because it has to match the one registered with the webwallet. It's not a problem if you use cards though.

As you are from Southampton, I have to ask, your name isn't Adrian by any chance?

When I was a teenager, a friend of mine had a friend who was pretty smart, and used a similar method for working out which companies sold his details to junk mail companies. It involved changes to middle initial(s) rather than messing with the main details. He was also rather good at electronics, cleverer than me in fact:o
 
Well if you've gone this far, then name them. Please PM the rep (if there is one here - I have a feeling there is though) so he can respond.

This is the problem with every online entity. Even the tightest secured system can fail against a rogue employee who swipes a database. It happens way too many times.
 
Well if you've gone this far, then name them. Please PM the rep (if there is one here - I have a feeling there is though) so he can respond.

This is the problem with every online entity. Even the tightest secured system can fail against a rogue employee who swipes a database. It happens way too many times.

But if an employee can swipe a database of names and emails (some emails included my real name), then what's to stop them swiping bank/card details too?
 
But if an employee can swipe a database of names and emails (some emails included my real name), then what's to stop them swiping bank/card details too?
I'm pretty sure that email databases are kept separate from the banking ones which are encrypted. Maybe some casino reps can shed more light on this.

I know of a couple of cases of stolen databases where it was only the email addresses that were involved. Nothing to do with banking details.
 
My Vote

I would also liked to see them named. I didn't take the time to register different email addresses for the proof but I've been very suspicious of some of the spam I have received. I had not been registered at many casino's until the last year and since that time my spam has increased fifty fold.
It has crossed my mind many times that we all might be very afraid if we actually knew the facts of what personal information might be easily accessed or leaked.
 
Casinos that break their confidentiality terms should be exposed, whether it will really help stop it from happening I doubt it. Even if certain casinos come forward and explain and apologize who's to say they are telling the truth about how are why this has happen.

I use two emails for online casinos and both are being sold or given out by some of the casinos. How I know, lately the spam level has been higher then usual, and the spam offers I receive I sometimes receive the same spam from the same spammer address in both my email accounts I use for online casinos at the same time. That tells me not only are they selling information it seems to suggest that certain casinos are also trading and sharing the information with each other before selling it.

It's a really sad players have to worry about trusting online casinos with certain information, and as mentioned earlier due to encrypted coding I doubt this is an issue with credit cards ect, but if we are going to gamble online this will always happen and I don't believe it could ever be stopped completely. Ignorance with certain employees in any work enviorment happens and in most cases not exposed until after the fact, but it never hurts to expose it publicly.

There is one other way to help with this problem and I know some sites are set up for doing just this is to expose the spammers, posting their emails at least brings attention to the spammers that are willing to buy this information and use it.

Funny thing, they don't get my business I just hit the delete button without even a look.
 
Last edited:
Ooops, something went wrong there. I've PM'd you again, and the reps.
Fine, I would expect the conversation here to take shape Monday since many of the managers are off on weekends. Just an FYI in case it seems they aren't answering :D
 
A highly reputable casino, it's just a myth, marketing tactic. You seem to be never safe.

Of course you're entitled to your opinion Cyprean but I don't think this statement is fair or true. Sure, there are some bad apples in the bunch, even a few rotten ones, but many casinos and poker rooms have worked long and hard to earn and keep their good reputation. Of course that's no guarantee that it will always be so, but I think one needs to give credit where credit is due.
 
Last edited:
There is also the ever present risk of human error, rather than malice or outright dishonesty - a casino can go for ages, handling millions of individual transactions without missing a beat, but then a single human stuff-up or plain stupid decision can bring discredit and abuse.

I'm not excusing inefficiency, but it happens....and not all screw-ups are motivated by evil intent. They're screw-ups, and the manner in which the casino management addresses them can speak volumes for their professionalism and the possibility of continued trust from players.
 
Ok, time's up. I think the casinos involved have had fair warning.

-----------------

The most recent one is totesport. I have had spam emails from 'superpalacegold.com' and 'Gold VIP Club Casinos' (
You do not have permission to view link Log in or register now.
, signed by itsforyougetitnow.com). I have not clicked on any of those links.

Their response to my emails were less than satisfactory as far as I am concerned;

The Marketing team have investigated this and believe the reason for the spam is an automated spam program has guessed your email address by using all combinations of the word "totesport". Other customers with "totesport" as part of their email address have been targeted by this in recent weeks, as have members of our staff who have "totesport" or "tote" as part of their email addresses.

We never pass on any confidential customer information to third parties and take customer privacy very seriously. Totesport have one of the best reputations for security and trustworthiness in the online gaming community.

You have received it as you have registered an email address beginning with 'totesport'. As we have stated below even some of our own staff have received them as they have email addresses like this. We would not pass your details on to anyone else.

The emails you have shown us are gambling related, if they search for email addresses using 'totesport' then they are expecting to find people who have gambling accounts and can aim these emails towards them.

To me this suggests that they think I used [email protected] elsewhere on the internet and that's how spammers have picked it up. They won't be told otherwise. I've asked for my account to be deleted, however I imagine it will only be deactivated, and this gives me cause for concern. However the words stable, door and bolted spring to mind in this instance.

-------------

Also last week was bluesq.

I received emails from; Link Removed ( Old/Invalid) and Link Removed ( Old/Invalid) . Once again I haven't visted the sites, and do not know if they are casinos, rogues, phishers or virus sources.

Bluesq told me on wednesday that their security is investigating, and they haven't traded or sold any email addresses ever.

I chased them sunday and am awaiting a response.

-------------

Way back late last year my intercasino.com, intercasino.co.uk and littlewoods addresses were used by 'iCasinoMagazine' who 'reviewed' Empire Casino.

All three casinos liased with each other and identified a member of support staff who had walked off with a list of email addresses. The last I heard was that they were trying to take the guy to court, but that was many months ago, possibly a year. I haven't heard anything since, though I did get a spam email from a willhill affiliate to one of those addresses.

---------------
Going back to stable doors and bolted horses. I really want to hear from uninvoled casinos about what security they have in place to prevent this from happening in future. And I advise you all to use unique email addresses if you have the power, i.e. your own domain with a catch-all account.
 
Well, totesports got back to me and they were planning to respond here, but they wanted to see what the other casinos came up with. So it's not like this isn't being looked into seriously.

I would suspect either a spam machine generating these sorts of emails, or some ex-employee walking off with an email list is what is happening here.

I seriously doubt any of these casinos would sell an email list - for one thing it's not worth the risk, and they make enough money through legitimate means. Selling email lists are usually done by your fly-by-nights or Costa Rican clip shot joints that lack scruples and are hard up for cash.
 
...Going back to stable doors and bolted horses. I really want to hear from uninvoled casinos about what security they have in place to prevent this from happening in future. And I advise you all to use unique email addresses if you have the power, i.e. your own domain with a catch-all account.
Excellent point - I've always recommended that players do this to fight spam:
https://sussexmskpartnershipeast.com/accredited-casinos/

Point seven: Fight Online Casino Spam

And here:
https://sussexmskpartnershipeast.com/how-to/fight-online-casino-spam/
 
Last edited:
Totesport's response to me has now turned into an email war where I am trying to explain how spam attacks work.

The spam machine theory falls flat as I haven't had spam to [email protected] nor [email protected]. So it has to be an address the spammers know to be true and worth targetting. [email protected] is also true, but they haven't seen the worth in targetting that.

The selling details part I agree with absolutely. Casinos would make pennies from selling addresses compared to the amount of money they stand to lose from doing it. It's pointless and only an imbecile of a manager would do it.

It's surely an issue of security. I want to know what is being done to prevent this from happening at other casinos, and how it happenned in the first place. Most of all I want to hear that my banking / security questions etc are kept more securely and are safe.
 
First off, let me say that I am in now way as knowledgeable as most of you on this forum about domain names etc, wish I was but I am not. That said, I have now learned something new. I wondered where in the world some of these strange casino email offers I was getting on my AOL account were coming from. Now I know. Since I only have used my AOL (bad AOL) account with two casinos, looks to me like they have either had a breach in their security or, heaven forbid, they know that my email has been sent out for spamming. Both of these casinos are very reputable so I hope it is the first option. Of course, I just delete without opening but it is still coming.

You should see my Yahoo! account. I get roughly 300 spams a day. But I use this account as a catchall for everything. I had hoped when I set it up that AOL would remain clear and Yahoo! would be the one for spam. But now they are creeping in on me.

How interesting!!
 
It's not as simple as that either.

Because so many people use AOL.com as their domain, it is worth the spammers time and effort to spam every permutation from [email protected] to [email protected], and it's quite possible that that is the case with you.

The same is true of most addresses given out by ISP's or webmail hosts, and large companies.

It's less true of smaller companies and personal domains, and when an attack does happen, it's far more obvious. Attacks are rarer as the spammers know they will have a lower sucess rate at mydomain.com than aol.com or ford.com, and as a result it's not worth the effort and computing power.
 
There are other reasons to be skeptical of the spam machine theory. For instance I have several domain names that I use for email and a generic "catch all" mailbox at those domains which is used if an email comes in with an unknown addressee.

Guess what? I don't get a lot of email sent to random names while I do get a fair amount of spam targeted at my specific email addresses. Admittedly I have used those email addys at various places around the web, not a lot but a little, so you could understand how those would get picked up and added to the spam lists.

So what I'm saying is that I've had these domains for years and very seldom see the random addressee thing happen.
 
With a packet sniffer (program to peek into data being transfered over an internet) a spammer can collect tens of thousands of unencrypted email addresses in just a few minutes.

You do not have permission to view link Log in or register now.


Your unencrypted email addresses are NEVER safe from spammers.

The more unencrypted email you send the better your chances of your email address getting collected by a spammer.

Also some spammers like to have their packet sniffers frequent specific networks, so they can collect email addresses from people that have shown an interest in what the spammers are selling or promoting, you know things like online casinos...

I find it amusing that the casinos and casino employees are being blamed... When in fact, the security for unencrypted emails is about as good as the security at the USA's southern border.

In other words, sending an unencrypted email is about as secure as publishing your email (and your email address) in your local news paper's classified section.

FYI - You may encrypt your email... But what about the person that replies to your email or sends you an email? If the person that replies to your email or sends you an email does not encrypt their email, your email address is still out there for the spammers to collect.
 
I would like to give my sincere Thank You to all the posters in this very informative thread. I appreciate being given the opportunity to learn more about this frustrating problem that attacks everyone with an e-mail addy and an "internet life".

I also hope that we will receive some reasonable responses from the casino reps to help us feel more secure about this important issue.

Many Thanks People. Keep this info coming!!

Jod
 


That's something I hadn't thought of. It's possible that they're sniffing packets near the casino's and getting addresses that way, which obviously isn't the fault of the casinos at all.

It's unlikely in totesport's case as they don't sent me email generally, and I don't send them any either, but it's certainly one of the best explainations so far.
 
The "To" address is unencrypted even if you encrypt the body of your e-mail otherwise the mail servers along the route would not know where to forward the e-mail. Nervertheless, if you can sniff network traffic, you can probably get lot more valuable information than e-mail addresses.
 
That's something I hadn't thought of. It's possible that they're sniffing packets near the casino's and getting addresses that way, which obviously isn't the fault of the casinos at all.

It's unlikely in totesport's case as they don't sent me email generally, and I don't send them any either, but it's certainly one of the best explainations so far.

I had a look at that packet sniffer article, and it makes it clear that a spammer can't just sit at home and log into another network and sniff the packets. This means that in order to capture the packets, the sniffer must be either running within the casinos own networks, or on your home PC.
If a majority of totesport users are getting this spam to the E-mail registered there, but not to other E-mail addresses, then this points to a security breach at the Totesport end. In this case, either an employee has harvested the E-mail addresses, or the packet sniffer is operating within the Totesport network, having been planted maliciously - perhaps by a trojan application. The article also shows how hard it can be to trace.
It is also possible that only the E-mails are being targeted, and the packet sniffer could be on one or more of the mailservers that route the E-mails.
Other articles I looked at last night assert that the random generation of large numbers of possible addresses is not that common, and spammers prefer to have an idea that their targets are genuine recipients. Also, this problem can explain why sent E-mails are never received by the recipient. There are industry wide blocklists that can block whole domains, meaning legitimate users on that domain can find people claiming never to have received their E-mails. I am interested in that because of the number of times I have E-mailed casinos who then claim not to have received it, even though they have received other messages - this can be down to routeing, sometimes E-mails appear to come from a spammers domain, and at other times not.
 
I use several email addresses for gambling as well and I can confirm that I did also receive the "Gold VIP Club" casino spam in my inbox of the email address which is registered with Totesport...

This bit of information makes the "sniffing packets" stuff really go out of the window when Totesport is concerned. I don't see how "Gold Vip Club" spammers only buy information from packet sniffer who only target Totesport-emails.

[wild guesses]
It could be one of their employees or not. Totesport is a Playtech, but perhaps they have outsourced some of their casino operations, and the e-mail lists have leaked to an evil employee.
[/wild guesses]
.
 
I had a look at that packet sniffer article, and it makes it clear that a spammer can't just sit at home and log into another network and sniff the packets. This means that in order to capture the packets, the sniffer must be either running within the casinos own networks, or on your home PC.

I just wanted to say that the gist of this is that the sniffers are an invasive thing: they must have access to the traffic in order to do their work. It's somewhat similar to having your phone bugged.
 
I had a look at that packet sniffer article, and it makes it clear that a spammer can't just sit at home and log into another network and sniff the packets.
lol... an expert after one article. ;)
A packet sniffer can be run from anywhere, just like any program.
The real good ones (actually, the only ones that the real spammers use) are run remotely from a
You do not have permission to view link Log in or register now.
.

Please note, I did NOT say that some casino employee did not sell a list of email addresses to some spammer, that very well could have happened.

However,
I am saying, that if your into odds... The odds are far far better that your email address got picked up by a packet sniffer, than it got sold to a spammer by some casino employee.

@GrandMaster, most packet sniffers will drop the packet if any part of it is encrypted. Of course, that can be changed by a tweak of the code. But then you have to compile and scan all the encrypted packets for unencrypted data, a massive task... So using encrypted email will still protect your email address better than not using encryption.

Nervertheless, if you can sniff network traffic, you can probably get lot more valuable information than e-mail addresses.
An evil email spammer is going to throw away good email addresses, because he got a few passwords... I don't think so... lol
 
Just out of curiosity, I checked a hotmail account that I use only for testing purposes. No one has this address, and it is a VERY obscure address with a ficticious name, number combination, and dashes. This morning there were three spams in my inbox - and copied on were a few more email addresses like mine but a number or two off. Of course these were all generated by some spam random email generator. So this happens.

None of the spams were casino related.

@ lifechooser - who did you receive the spam emails from? Were these directly from the casino or were they from affiliates. If you can't tell, feel free to post them here with full headers.
 
I've answered both of those points before.

Hotmail is different, as so many people use the hotmail domain, it's worth spamming every permutation of name @hotmail.com as most of them will turn out to be valid addresses. This isn't the case with my own domain.

Also, when I named names, I gave the names of all the senders of the spam too. Since then I've had one to totesport from 'spin palace' (though the link points to Link Removed ( Old/Invalid) ).

Here's some partial headers;

Totesport #3;
Comment: DomainKeys? See
You do not have permission to view link Log in or register now.

DomainKey-Signature: a=rsa-sha1; q=dns; c=simple;
s=s512; d=vivayouarelucky.com;
b=H7yLbS4SOk6eBRm/hCJNdMiA3dzeuIuFI5O4Z268ProsLjcN3OXBwGpQ87l5agCi7wenSLcsbcb1i7f8JwD9jQ==;
Received: from mx56.vivayouarelucky.com [216.10.15.56] by vivayouarelucky.com [216.10.15.56];
Mon, 10 Dec 2007 14:02:56 EST
-------
Totesport #2;
DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=itsforyougetitnow.com;
h=from:to:subject:date:message-id:content-type;
q=dns/txt; s=s512; bh=ulzAB3gYJXNqsiMhkbPZi5xMNhE=;
b=V24d+pSJ76WXPvg/NQANCs0IS4ZBetA1+EXgAEDz9mWn0cMGTwj3yFB5w5FyD3U3m/pB9nVWp6iuGFI81BvIjw==;
Comment: DomainKeys? See
You do not have permission to view link Log in or register now.

DomainKey-Signature: a=rsa-sha1; q=dns; c=simple;
s=s512; d=itsforyougetitnow.com;
b=Skqvq/ZiKlPey1eY/ckgADYqsITuY9HFvwM9YBrpUIDOECa/IHf6fVrhtzFk8fDlJMOpHL5Qymo1mst3zVp+IA==;
Received: from mx25.itsforyougetitnow.com [216.10.15.25] by itsforyougetitnow.com [216.10.15.25];
Sun, 9 Dec 2007 18:24:19 EST
MIME-Version: 1.0
------------
DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=superpalacegold.com;
h=from:to:subject:content-type:date:message-id;
q=dns/txt; s=s512; bh=PPXyHYv6Ou+5FBSNwoOzuk6aiCY=;
b=YafHjZz67gy+XS8A0MztstkPL1vyl+SyaTh+MCCho4lCzilJkEi+ZbVdU/DSY0fK0ziUuReVR0Tt5p+QIxzvrw==;
Comment: DomainKeys? See
You do not have permission to view link Log in or register now.

DomainKey-Signature: a=rsa-sha1; q=dns; c=simple;
s=s512; d=superpalacegold.com;
b=lR6ikWJj4gg2h1OxnpTAyUtRi7udJfxBAiB+ldGqvwmsvg3dayBVabCa47RoteRf7VpYT1NeYepqrGAKElFEcQ==;
Received: from mx52.superpalacegold.com [216.10.15.52] by superpalacegold.com [216.10.15.52];
Thu, 6 Dec 2007 18:45:49 EST
MIME-Version: 1.0
----------------
So all of them came from 216.10.15.xxx which is godaddy. The domains were registered on 29th November 2007, by;
Doust, John [email protected]
dedijohn
cyprys limassol
limassol, lima 8234
Cyprus
357892949302

-------------------

Bluesq #1;
Received: from balmyd.net ([75.126.66.132])
by mx.kundenserver.de (node=mxeu17) with ESMTP (Nemesis)
id 0MKxIC-1IzGCL3MBS-00083p for [email protected]; Mon, 03 Dec 2007 19:39:18 +0100
Message-ID: <[email protected]>
Date: Mon, 03 Dec 2007 20:12:32 +0100
Reply-To: <[email protected]>
From: <[email protected]>
MIME-Version: 1.0

---------------------
bluesq#2;
Received: from beardc.net (www.rockheads.com [74.200.253.12])
by mx.kundenserver.de (node=mxeu22) with ESMTP (Nemesis)
id 0MKr6C-1J0jci2VT4-0003xp for [email protected]; Fri, 07 Dec 2007 21:16:37 +0100
Message-ID: <[email protected]>
---------------------
Whois;
Domain Name: BEARDC.NET

Registrant [1151825]:
Moniker Privacy Services
20 SW 27th Ave.
Suite 201
Pompano Beach
FL
33069
US

Rockheads.com;
Rockheads Comics & Games
2527 75th Street
Kenosha, WI 53143
US
(I suspect this may be a bot)

Domain Name: BALMYD.NET

Registrant [1151856]:
Moniker Privacy Services
20 SW 27th Ave.
Suite 201
Pompano Beach
FL
33069
US
Record created on: 2007-11-08 22:36:47
 
Thanks! Were the casino URLs aff links? Please post these.

You can post those here and deselect "Automatically make website links clickable" so that no one can click through.
 
Hi all,

Casinomeister was just good enough to alert all of us Casino Reps to this thread so that we could contribute a bit from this side of the fence.

Selling e-mail addresses happens. We get approached about once a month from someone with a list of e-mail addresses, physical addresses, or both. I'm sure we would get a lot more offers if we ever bought a list, but we haven't (and won't).

Your e-mail address, physical address, and phone number are all available to just about everyone on staff. They have to be in order for you to get good customer service. There are ways to prevent a staff member from being able to produce a list from that information, though. With us, you can only make a list if you have access to the database, which very few people do. You could request a list from someone with access, but in order to receive it, the request has to go through a senior member of management. It seems like a lot of red tape, but it is there for your protection.

Of course, the best way to prevent someone on your staff from selling customer details is to hire carefully and treat the staff well.

Your banking details should always be secure wherever you play. We do not have access to any of our customers' credit card details. These are stored by the credit card processing company that we use. We see the last four digits of the card number, and no more.

We also do not store passwords. If you need a new password, we can generate one for you, but we never see it. It would be easy to find out if your casino stores passwords; just ask for your password and see what their response is.

Keeping a separate e-mail address for each casino is a very good idea, especially if you use your own domain.

Let me know if you have any questions. I can only answer for Eurolinx, but there should be a few more Casino Reps chiming in soon.

Best,
Eurolinx Lydia
 
Hallo there,

Hope everyone is well.

The same goes for PlayShare and almost all Microgaming casinos that is stamped and approved by eCogra.

Players information should be and is the utmost importance at PlayShare and all there affiliated casinos.

We are being audited by eCogra seeing that we are in the process of acquiring their stamp of approval and clearly by their guidelines and practices accepting or even undergoing such devious practices such as buying mailing list is just above me.

Why would a reputable casino have to fall so low in order to acquire a player?
Your personal information should be and must be number one priority as without having secure and well maintained systems and security practices the online casino industry will not be able to survive.

Again at all times your information is safe with us.

Best regards
Mario
 
Player security is extremely important to Purple Lounge and we have similar security measures in place as those mentioned by Lydia. Our team is dedicated to providing the best service for its players, which includes safeguarding all their details.

As previously mentioned, it would be crazy, not to mention illegal for a Casino to sell player information. All our staff are thoroughly vetted and must provide numerous references, which are all carefully checked. The Purple Lounge team is committed to ensuring all player information remains protected.

Kind regards

Zelda
 
As with any reputable casino and sportsbook, the players security is paramount. Here at Betfred access to the database is strictly limited to management. The support team do have access to personal details in order to assist players effectively but they are also monitored by the shift supervisor and would be unable to make any copy of said information without raising suspicion.

Banking details are kept on a separate database and even I as part of the casino management team would not be able to access such information without an extremely valid reason and then not without the most senior level approval.

An added level of security is that every action taken by ANY staff member is recorded at some level. We can monitor all changes and requests on the database and exactly who they have been requested by. This is a great deterrent to any would-be data thief.

All player passwords are hidden from all staff here and a member of our team should never ask for it (I would certainly like to hear about it if they did!)

Regards,

Ian
Casino Manager
Betfred Casino
 
Thanks! Were the casino URLs aff links? Please post these.

You can post those here and deselect "Automatically make website links clickable" so that no one can click through.

I've provided as much as I know about the links. Where the casino name and links don't match, I've provided the link name, e.g. when 'spin palace' spam actually used the url http://www.bigspinwinners158.com/1/a320623/index.asp.

Others I've mentioned;
superpalacegold.com (actual url)
Gold VIP Club Casinos (http://mLink.org/55322)
http://www.bigota.net/ and http://www.bluesb.net/ (Both actual urls)
 
I'll happily second that! Well done reps!
 
Selling e-mail addresses happens. We get approached about once a month from someone with a list of e-mail addresses, physical addresses, or both. I'm sure we would get a lot more offers if we ever bought a list, but we haven't (and won't).

For those approaching the casinos with these email list is the casino staff taking any actions to report or have them blacklisted in anyway, if not, they should be and in the long run would help everyone. The player has no control over this happening and the only thing we can do is to filter the emails, but this does not solve the problem.
 
For those approaching the casinos with these email list is the casino staff taking any actions to report or have them blacklisted in anyway, if not, they should be and in the long run would help everyone. The player has no control over this happening and the only thing we can do is to filter the emails, but this does not solve the problem.

So far, we have just been marking the e-mails as Spam and deleting them. I'll check with our e-mail guys today to see what else we can do with them.

As reputable casinos, what we can do about this problem long-term is ensure our player lists stay on our databases and no stolen lists get purchased. As players, you can do exactly what you all are doing in this thread; exposing those casinos who have violated their players' privacy rights.
 


Write your reply...

Users who are viewing this thread

Accredited Casinos

Read about our rating system and how it's done.
Back
Top