Generally, casinos or any platforms start a bug bounty program when they first launch their platform so that if users find any vulnerabilities or bugs in the platform, they report them to the management so that they can get a reward and they can improve their platform, and they stop that program after some time when they feel that there aren't any more bugs and vulnerabilities, only a few platforms would have such a program all the time.
So expecting something in return for reporting a bug or a vulnerability on a platform that doesn't have a bug bounty program going on is useless because you are not going to get anything at all unless it is something very serious and it could cause them huge losses, then they might think of giving you a few free spins.
However this attitude can cause bug to go unreported, after all an honest gambler may not take advantage of the bug, but if there is no incentive for them they may not report it either, thinking the people responsible behind the website to check for those things will eventually notice it, however if they do not and the first one to notice it this time around is a cheater this could bring heavy losses to the casino, losses which could have been avoided with a bug bounty program.
The casino will look closely at what you are doing when you keep winning, and get caught in the end. Taking advantage of the bugs discovered will not be taken lightly by the casino. As a consequence, they can pretend all things are good and they will make you lose all the time from now on lol that's really a bad ass casino. Yup Karma knows no boundary.
Or the casino will suspend your account with your money frozen. And then they will show the public what you did cause it can't be coincident that you keep doing it over and over with the help of the bug.