Quote from: JeromeTash on Today at 09:26:21 PM

Quote from: Sling0 on Today at 09:12:53 PM

-

I do hope they hear you out or at least pay you handsomely for the bug. Some brands are so mean when it comes to paying out bug bounties yet if the person inside decided to exploit the bug, they could cause some reasonable loses to the service.

I saw a scenario where a service refused to listen to someone who had discovered a bug, claiming they had no bug bounty. Some months later, a bad act discovered the bug and exploited it. The service suffered huge losses as a result.

Hopefully he will get some bounty if the bug is actually critical or have some relevance, but let us be honest, in the most of the times when comes to security and claiming bugs developers and white hat hackers are not only supposed to find the bugs and disclose them to the services/casinos in a responsible way, but have good enough communicative skills for them to explain what the bug/exploit is about and what could have happen have not they figured it out before a malicious actor.
Since I am pretty sure costumer service does not have any power to grant money to people who find bugs or exploits, they will likely transfer the case to the security department, and from the security department to some administration to decide whether the problem found deserves some money as compensation.
Sadly, sometimes the compensation of these kinds of situation highly depend on someone who handles some of the money of the casino and has no idea about coding or security. If one is not able to convince the security staff of the gravity of a exploit, it is very unlikely the security employee will end up convincing the one person who is supposed to approve the reward . Roll Eyes