Brooding about something...

[lettingyouknow]

theres another thread going on at moment about 32red verifying players by doing a credit check for verification purposes..

i think it an excellent way to doit....it has no negative effect on ur credit file and saves on sending in docs..but i also was worried sending such docs somewhere to people i dont know in another country there has to be a better way to do it and verification through credit check is certainly a good way imho

Having been in Mortgage Banking and working for the Big Banks which includes running credit checks for 30 yrs, this idea is TERRIBLE!!!! Every time anyone runs your credit it shows as a credit INQUIRY. These Inquiries are the First place I would go to see your character and where you are at in your life at present. If you have Credit inquiries, (Inquiries and EVERYONE who checks your credit shows on your report).

[lettingyouknow]

Showing that a CASINO just ran your credit is a sure fire way to destroy your credit. I will bet (no pun intended) that the Underwriter looking at your future credit for a home loan will think twice if she/he sees a Casino ran an inquiry, on your credit report.

Banks etc will tell you "Oh, it is only an inquiry, it won't effect your credit" we call it in the industry a SOFT credit hit not hard hit. The list of ALL Inquiries ran on your credit will show whether you opened a loan or not. It absolutely brings down your Credit Score!!!!!!!!!

Also keep in mind that most Banks not only look at the credit score they look at the inquiries to see where you are at in your life at present. If they see a credit inquiry for a jewelry store and then another one for a Jaguar and oh another one for a Casino all in the last 6 months and now you are applying for a home loan?

DO NOT ALLOW ANYONE TO RUN YOUR CREDIT without your knowledge first, and second always be aware that credit inquiries ALWAYS effect your credit score. The number of inquiries will bring down your credit score.

Also bill collectors go to your credit report first to track you down, so if you have moved changed addresses phone numbers, etc want to leave something behind and want to start over etc. anyone telling you this information is only for us, we do not share it with anyone, is a LIE.

Everyone running your credit has to enter your CURRENT INFO address phone etc to even pull up your report, once they have your credit report in hand anyone else bill collector etc can also come behind that inquiry and find your RECENT phone and address etc.

[P.V.]

When we were "building" our security system, we had to decide how should we store players' data and their documents. We tried to discuss every possible problem or data breach

I'm sure your system is secure, like mine, I wasn't implying this. I can't imagine someone getting hold of a players documents either and this is why I've been discouraging the process of online casino's requesting personal information via unencrypted email , fax and mail. You're obviously on the right track.

I was pointing out the fact that IOM regulations requires you to save this information in your server for a min. of six years, I wouldn't want that no matter how secure the system. Example: If a player opens an account, uploads their doc's to your casino, closes the account you'll still be holding their information for at least six years. UK DSA states - (Where sensitive personal data is concerned, it is particularly important to make sure you collect or retain only the minimum amount of information you need.)

It's the IMO regulation requirement which you can't avoid. So even though you've taken steps to help your staff and player security, I can't support it being done through the casino server.

Under the UK Data Security Act, if a UK player for example asks for an (SAR) subject access request, players can ask to see information being held on computer and some paper forms and I'm assuming servers too. This might cause a problem for you too if people should start asking for information on them being held in your system five or six years down the road.

[P.V.]

Just imagine that someone got an access to player's account with all documents stored in it, with possibility to remove/update/deleteThis is absolutely inacceptable.

I should have pointed this out in my previous post, maybe you'd like to expand on the quote about players having access to remove/delete or update their own documents.

As outline in the US - EU Safe Harbor Act it's in fact a requirement for this process. I know you're not offering services to the US but the procedure is common and a requirement.

Access

(Individuals must have access to personal information about them that an organization holds and be able to correct, amend, or delete that information)
So actually it's not anomalous to offer this type feature to a person in a secure encrypted, password protected environment as maybe your suggesting, not sure.

I commend you Viktar at looking for better and more secure solutions but if you want to keep it all in house I'd suggest keeping it separate from the casino sever and building this function on another dedicated sever not under the control of IOM regulations as suggested.

This is my personal opinion as I've researched this stuff endlessly, I do have an interest in this area.

I feel contented in saying when OC's start requesting more personal data uploaded to their offshore gaming servers than just the data captured during registration, you're going to be required to supervene more data protection guidelines.