Email verification is simpler than 6-9 digit code imho, if they use such code then there is a big chance for the players to forget the code. It is also safer to use email verification, as we need to have an access to our email once we login in different IP. In case of hacking, 6-9digit code will be easier to crack than email.