As I said in another post from someone that they did that to:
They can take that clause and shove it up their ass.
As long as they have no recourse to take it out of your bank account, screw them.
If you want a nice reply, simply let them know that to the best of your ability, your account information WAS secure. You did not KNOWINGLY let anyone have access to it, nor did you let your machine be insecure.
Let them know that you run frequent windows updates for your computer, which include many security updates for XP. Also, that your (windows?) firewall is turned on.
Close it out with
"Is it my fault that Internet Explorer is so vulnerable to allow trojans to download AND run without my knowlege?
And if they want their money, go after Bill Gates and Microsoft, NOT you.
Basically, tell them to fck off, in a nice way
It's not like you can use them anymore for gambling, anyways.