Quote from: Poika5 on Today at 04:05:17 AM

Quote from: GekkeBelg on Today at 01:06:57 AM

Quote from: Poika5 on November 24, 2023, 12:15:51 PM

Quote

We have since learned that our database was compromised and potentially sold to another casino platform that falsely claimed Betnomi had rebranded.

Whoever bought your database has access to all the information required for a successful refund.
So what's stopping them from creating 100 fake refunds if they have all the client data? Username, email, balance.

Quote from: betnomi on November 21, 2023, 06:11:49 PM

Betnomi Refund Plan

Code:

1. First name, Last name (if you are KYC verified)
2. Username (request will be ignored if the username does not exist)
3. Email address (request will be ignored if the email does not match)
4. Refund Amount (approximate balance is acceptable)
5. Wallet address (we will process only in the cryptocurrency you have)

This whole thing has more holes than Swiss cheese.

If someone has their database, they do not have access to the email of the users yet.

The refund email still has to be sent from the registered emailaddress and ofcourse only the user himself can do this.

But how hard is it to spoof an email address?

I have no idea, pretty hard still I think. But even if they manage it, if there are 2 emails sent claiming the funds, then ofcourse Betnomi should investigate.