The horrible thing about this whole thing is that the worst case scenario is if they are telling the truth.  If they have been telling the truth this whole time, that means that they let someone nefarious access their back end server (that's how they know exactly how many users have received phishing emails like they said) and that that person/persons has now accessed parts of their back end that they didn't intend (that's why users are being banned and nobody knows why).  Are the private keys of the hot/cold wallets next?  What about player's passwords?  Oh wait, weren't those compromised a few months ago?

Is there a lie that is worse than Betcoin's truth?  If this isn't the actual truth, why would they make up a lie that's worst than the truth?