Said like this, your first paragraph, the first thing that crossed my mind was, "that looks more like an attempt of installment, not an investigation." But with your explanation on the paragraph that followed, I guess it can be argued that yes, there were very few, perhaps even none, casino that allows such leniency during investigation. Of course, assuming that this is indeed an investigation requested by your provider instead of an installment attempt.
I understand what you are saying, but the truth is that we are a small team and we are not currently able to resolve these cases as quickly as we would like to.
We have had similar problems before, because this user and many other users before this one (or multi-accounts of this user) have a similar and suspicious playing pattern (among other things), so we have suspected for a while now that there might be some exploit in our games and we are still investigating as fast as we can, but we decided to give him the option to slowly withdraw his winnings in order not to harm him that much.
We know that this is annoying and time-consuming, but we are doing it for our sake and the sake of our legitimate users. We are an honest casino, we have had these problems before and we have always managed to resolve them in the best possible way, which there is plenty of evidence of in our
main topic on this forum.
If I may give my opinion and an input, this seems counterproductive. It doesn't speed up an account creation process, long-term speaking.
Yes, it safe some seconds when player signed up as they don't have to type their preferred password, perhaps 30 seconds, or let's say one minute, if the players are the kind that use a specialized password, customizing each password on each platform. But for those who prefer to stay long term, I guess they'll prefer to have "thisismypassword" instead of the "dmAr03caSJ" that's randomly generated and assigned to them. Thus, more likely than not, they'll need to open their email, retrieve the randomly generated password, paste them on your platform, request password reset, confirm through their email, then type their "thisismypassword" password as the new one. Seems like more hassle than a convenient process.
You might want to consider removing this option.
We do it this way so that a new user can start playing as soon as possible, without having to go through the annoying registration processes that are necessary on many websites. This way, users who only play for a short time don't have to worry about their account if they don't come back to the site, and users who want to stay for longer only have to change their password or save the password we automatically created for them, and in both cases, users benefit from a quick and hassle-free registration.
But I understand your point of view and agree that this registration process has its advantages and disadvantages, so I thank you for your feedback and I will forward it to the team. But in any case, this user should just contact the support team and wait for a response to regain access to his account.