Account security concerns at multiple casinos

[lifechooser]

Whenever I hand over my email address, I always use the format theircompanyname@mydomain.com, so that when I recieve spam I know who has sent it, or sold my details, or generally broken their own privacy rules.

Before this year, I'd only ever caught one company out, the BBC of all people. This year I've had a couple of companies selling my details when they shouldn't, and one magazine who admitted a security breach, and gave me a free subscription in compensation.

On top of that however, I have now had spam emails sent to five different addresses that I have only ever used to register at casinos with.

3 were related (same casino software, same spam), and the casino admitted in confidence that it was a breach of security by one of their support staff. At one point the manager of one of the casinos phoned and wanted me to testify in court against that person. I agreed, but haven't heard anything since, despite chasing.

Another was earlier in the week. My email to support was forwarded to security, and the casino guarantees not trading or giving out of email addresses. I will chase this today until I get a satisfactory response.

The final one happened this morning and was the straw which broke the camels back. I have yet to email the casino in question, but it won't be a friendly email.

All five casinos involved are highly reputable, popular casinos. All spam emails are the sort that wouldn't get past the lamest spam filter, and link to sites I've never heard of with way to good to be trusted 500% bonuses to new US players. All casinos guarantee privacy and not to sell or disclose details to third parties.

For now, I'm not going to name names, unless casinomeister thinks that I should. What I want to know is how well I should trust casinos? They have lots of personal details from me, including credit cards, neteller and bank details, and security questions such as my mothers maiden name. I'm getting extremely worried and tempted to phone up most of them to ask for my accounts to be deleted, leaving only a one or two to play at regularly.

I also wanted to bring this to everyone's attention on here, and hopefully to hear from some reps about what security they have in place and vetting of staff to prevent breaches such as these.

[maxd]

... I'm not going to name names, unless casinomeister thinks that I should.

I can't speak for the main man but my vote is "Name Them!" If we don't call the name-sellers out then they just do it, take the money, and run. Give them publicity they don't want and maybe they'll see the error of their ways and, perhaps more to the point, others might too.

[jetset]

I agree - you seem to have certain proof that these operations are abusing the confidentiality of the email addresses you gave them - expose the buggers!

[vinylweatherman]

I agree, name and shame. If they are allowed anonymity, they will remain in denial that this is happening. If named, the reputable ones will have an opportunity to mend their procedures. It would only be fair to PM the relevant casino reps, so that they have an opportunity to join in the debate, and alert their management to what has been found.
If you have proof, better still. You are not making wild assumptions, if you have used different E-mail addresses to different casinos, it is easy to spot the sources of the leaks of your E-mail addresses. It may be deliberate, or a scam from a low level employee who sees the opportunity to make a little extra on the side.
Many of us here know that, despite promises, our details are not as secure as they would be at, say, our banks.
One problem with this method of detection is that you cannot use webwallets, as the E-mail address registered at the casino has to be your "real" one because it has to match the one registered with the webwallet. It's not a problem if you use cards though.

As you are from Southampton, I have to ask, your name isn't Adrian by any chance?

When I was a teenager, a friend of mine had a friend who was pretty smart, and used a similar method for working out which companies sold his details to junk mail companies. It involved changes to middle initial(s) rather than messing with the main details. He was also rather good at electronics, cleverer than me in fact

[Casinomeister]

Well if you've gone this far, then name them. Please PM the rep (if there is one here - I have a feeling there is though) so he can respond.

This is the problem with every online entity. Even the tightest secured system can fail against a rogue employee who swipes a database. It happens way too many times.

[lifechooser]

PM's sent.

[lifechooser]

Originally Posted by Casinomeister

Well if you've gone this far, then name them. Please PM the rep (if there is one here - I have a feeling there is though) so he can respond.

This is the problem with every online entity. Even the tightest secured system can fail against a rogue employee who swipes a database. It happens way too many times.

But if an employee can swipe a database of names and emails (some emails included my real name), then what's to stop them swiping bank/card details too?

[Casinomeister]

Originally Posted by lifechooser

But if an employee can swipe a database of names and emails (some emails included my real name), then what's to stop them swiping bank/card details too?

I'm pretty sure that email databases are kept separate from the banking ones which are encrypted. Maybe some casino reps can shed more light on this.

I know of a couple of cases of stolen databases where it was only the email addresses that were involved. Nothing to do with banking details.

[bb28]

I would also liked to see them named. I didn't take the time to register different email addresses for the proof but I've been very suspicious of some of the spam I have received. I had not been registered at many casino's until the last year and since that time my spam has increased fifty fold.
It has crossed my mind many times that we all might be very afraid if we actually knew the facts of what personal information might be easily accessed or leaked.

[cyprean]

This thread has potential.

A lot more exciting than the reruns of the Bold and the Beautiful.

Name 'em!