<snip>
What happens is that always in a casino when they find a way to abuse a system they will exploit it until there are no more exploitable resources, and even more so when the casino is not aware of a certain vulnerability, there is a reason to be able to decapitalize the money. of a casino, this gives a step to continue looking for ways to continue doing it and not saying it, maybe in casinos they do not put a high enough reward to encourage them to collaborate with security, sometimes a casino pays a lot of money in security so that those holes of pertinent insecurity do not exist, that happens in all casinos, there will always be those problems.
I believe the description you've pointed out from this post is about bug bounty.
For companies' websites, specially if it is crucial which involves money or big amount of data, security testing and bug hunting should be practiced (and I think most of them are doing it).
In the past, various bounty campaigns from different companies were announced here.