If I were dishonest and had access to someone's bitcoins I would just transfer them to my own wallet.  I would not deposit them in the same owner's just-dice account (and how did he login without pwd?) and gamble with it.  Pretty unrealistic.

I think the site would only be responsible for loses due to a blatant security hole in the login process.  If they choose not to use google authorization that is on them.