Non-Bonus Complaint Getting full access to random peoples accounts when signing in?

[chuzzleaddict]

I am a high rolling member of Mecca.
Over the weekend I spent around £5k+ playing there on slots.


Upon logging in on 2 occasions (Saturday night and Tuesday morning) I have been greeted by the welcome page of two members that are nothing to do with me (no connection to my name, address, computer, location, nothing) – and I am able to use their account balance, see their personal details, etc etc. I have not done anything unethical with the information presented to me and immediately have informed Mecca about it. On the first occasion they responded saying their investigation will take 5 days. Today they responded and said it will take longer. My account has now been deactivated with no word of explanation (as I presume they don’t want me getting any more occurrences of this).
The replies are always generic and unhelpful and do not seem to feel the gravitas of the situation from a security perspective.


My question is really:


Where do I stand with questioning the security of my own account – I dread to think this could be happening to others and worse still, other not so trustworthy members using my account unethically.


How can we have any faith in the security of Mecca when they allow me FULL ACCESS to the accounts of two random members like this and then not even take my e-mails too seriously? They are likely to come back and fob me off about a software glitch but I don’t feel that is satisfactory in this serious case.


I wish to close my account but not until I have received reassurance and perhaps as a goodwill gesture - reimbursement for my deposits over the weekend in question where I now feel my account was very vulnerable.




Words of wisdom on this appreciated. I am waiting for them to come back regarding findings of investigation. I have offered screen shots but they have not requested them.

 

[sparkz]

This sounds very sketchy indeed.


So let me get this right... You could actually see other players account info (name, address, cards registered) when logging in? So instead of grabbing your account info up for you to play, some of the time it had grabbed others??

I dont know what other members may say about it, but if it is right (you said you had screenshots to prove it?) this is a serious malfunction by them.

Technically, whos to say by having other players account info, details and balance on screen you (not suggesting you did, just saying anyone who experienced this could) could of used their info to deposit or worse still add your own e-wallet to their account and cashout their balance.

If completely true im sure someone will suggest max to have a look at the screenshots and investigate.

I dont know the rules of what happens on software glitches in terms of gameplay, but if there was a massive glitch thats proven by screenshots that has allowed you to do this, Im guessing perhaps its a malfunction where all plays are void (depending on your balance at the time of this)?

 

[chuzzleaddict]

Yeah that is correct. And in the case of the one this morning, they actually had funds in their account that I could have used (and almost did before I realised the member name was wrong and it had all happened again). This is awful!

 

[sparkz]

hmmmm, If true its a serious security risk that they didnt sort with the scripting.

Never played at Mecca, so I dont know what software they use or if its happened to anyone before.

 

[Jasminebed]

Mecca Bingo appears to be associated with Blue Square and Grosvenors.

The have a rep you can contact here https://www.casinomeister.com/forums/members/

This is a pretty serious issue I'd like to see a casino more interested in investigating it than they appear to be.

You may find this thread interesting, although it is a microgaming casino.

https://www.casinomeister.com/forums/threads/weird-hacked-experience.50859/

 

[graeme21]

Hi Guys,

My name is Graeme, I am the Affiliate Manager with Blue Square Bet - a partner brand of Mecca Bingo.

This does seem like a very serious issue and I have notified the technology department at Mecca Bingo.

When I recieve more information on the problem I will let you guys know.

Thanks,

Graeme

 

[chuzzleaddict]

Thank you.

I have now been asked for the screen shots sent to Rank interactive but the email address did not work. I have sent them to Mecca support any way. I only have screen shots for the welcome page as did not want to take copies of peoples other personal info. I would hate for someone to do that to me. But the welcome page shows the user name being wrong and their account balance.

They are still investigating.

 

[chuzzleaddict]

As a side note I am still not entirely thrilled that my account has been locked without any one from Mecca actually telling me they were going to do this and why. Terrible customer service I think. I nee to check the status of some withdrawals today and now have no way of doing so which leaves me in a mess as I like to make spreadsheets of my bankroll, profits and losses and I now can't see what is what from my weekend activity at Mecca and which withdrawals are outstanding. I am very frustrated and not for the first time with this particular casino. I remember now why it is one I do not frequently use.

 

[chuzzleaddict]

Have now been contacted by the Executive Customer Services guy who is really nice and giving me the kind of response I would have expected. They said they have had no other occurrences of this and how baffling it is that it has happened to me not once but twice, with two different members details. Have now spoken on the phone and provided the screen shots etc and finally seem to be taken seriously.

They are still investigating. But I am hoping as a goodwill gesture that they may offer to reimburse my last deposit on the site. We'll see. My account is still suspended due to the investigation which sucks as I would actually like to be playing.

 

[P.V.]

I'm curious, have you recently updated your profile information or is that even possible on this site?

If so that could be the culprit.

 

[naththo]

Wow never heard of mystery problem. It got me surprised by how you were able to access other user's account which is scary because it does look like a major security issue problem to me. I hope that the casino did not get a virus or hacked in anyway. It would be interesting to hear more news when the investigation is completed. I hope they have made the server more tighter security while they are investigating just in case to stop the situation from getting worse to much worse! It is very exploitation to me. But its a good move you reported it immediately to them before the situation would have gotten worse. Good on you. I hope the casino is taking their side of seriousness to work on to investigate the matter and maybe sort out with their network server that may have been vulnerable to virus or trojan or so. Who knows really? They better make sure that they keep operating system up to date with security patch, etc. I do also hope that the software producer who created it also may look into it and may fix the glitch problem.