Another nice DApp with some good looking code and a useful and clean web interface. Well done!

The encrypted hand approach you've used is an elegant solution to submitting and later revealing secret information.
The only security risk that stands out is that when the website encrypts a hand it sends the plaintext password to a Node.js server for encrypting. The Node.js server is presumably under the game authors control, so in theory they could see a player's password and determine what hand was played before choosing what hand to play against it. The page includes instructions for technically savvy users to encrypt the hand themselves. I'm not assuming the author has any malicious intent, just identifying that trust is required when using the website to encrypt a hand.
Personally, 0.5 ETH is too much for me for a game of luck. I'll wager bigger on games of skill and bluffing, but only take very small risks when the outcome is based on luck. At 0.1 ETH I might play a little.
Good work
