A guy deposited something like 1.17 BTC to a Just-Dice account, then deleted his cookies, or logged out, or whatever without making a note of the secret URL.

Then instead of contacting us using the email address in the "contact us" section of the site, he PM'ed me on the forum.  When I didn't see his PMs, he got increasingly concerned that I was scamming him.

The issue is very nearly resolved now.  He has proven ownership of his account to me, and I've asked him how he wants me to pass the secret URL to him, since forum PM is maybe not the most secure way of doing it.  I expect he'll say it's OK to use a forum PM, and so I'll use it.  And theymos probably won't steal his 1.17 BTC, either.