Instead of Email why not implement 6-9 Digit code?
Email verification is simpler than 6-9 digit code imho, if they use such code then there is a big chance for the players to forget the code. It is also safer to use email verification, as we need to have an access to our email once we login in different IP. In case of hacking, 6-9digit code will be easier to crack than email.
I mean 6-9 digit code for every withdrawal/tip you make. It will definitely help some people like me who deposit and play on a vps.
Recently my vps got compromised cause i didn't change the password company provided me. And suffered a loss of around 2 ltc which could have been even worse.