That's what I thought. They can put in their TOS that if you find a bug they can take away a kidney of yours if they want, another thing is if it is legal.

We can think about whether we consider it more ethical for someone who finds the bug to tell the casino instead of taking advantage of the bug, but if we start listing morally questionable actions by casinos both traditionally and nowadays we would make a long list.