Thanks for the fast replay.
Is the block id not a problem when there are many transitions? So all users in the block will win the same amount.
Unfortunately, this would be the case.
You say, a transaction can be generated unlimited times. Am I right that one would have to manipulate the client for this?
Yes, but when you're running a gambling site that has such an obvious vulnerability, it WILL be exploited.