If you are some sort of a programmer or having that coding experience and bug expert for you to find out those exploits and holes then it would be that easy but there were people who do able to find out bugs naturally specially to those who are really that making some gambling on the site itself on which they would really be expecting for some bug bounty or rewards on which it would really be that depending on a certain site whether they would really be considering those finds or wouldnt really be giving at all. It would really just vary on a certain individual on which not all people would really expecting somehow into those finds not unless if its really that a crucial find or exploit or bug then they might be expecting something.
The OP has updated the information about the problem at hand. According to him, the online casino does not respond to his request, and he does not even ask for a reward. Anyone else in his place would simply continue to exploit the vulnerability in the operation of the casino: I mean, if this mistake directly affected the ability to withdraw funds that are not on the account, for example. Online casinos should conduct bug bounties on an ongoing basis and increase the level of communication with customers.