Out of curiosity, if management have no strict rules against VPN then how they fight against promotion abusers..
Offhand, there's the way bitcointalk does it. Allow vpns and previously banned ips but disable certain abilities. So a site could disable bonuses/promotions/affiliate activity, etc on ips that are vpns or have been banned before.