It’s indeed true, hackers always do find means to get the job done even with 2FA in place. That’s where, many sites that use 2FA today no longer prefer the email options to it. Many uses Google authenticator app given that, emails are easily hacked and once that is out of the way, it’s always a straight way through to account hacks and you’ve got little to do about it if you don’t get to noticed on the mails.
Account security is not meant for the casino alone rather securing your account involves both party although personal data are protected by the casino. Not all 2FA process are the same and the email process is still required by some site along side google authenticator app for example getting a google Authenticator app still requires customer email. Both process sound more better compared to one meanwhile account hack only happen when a person is not conscious about their account, exposing email address can as well get anyone in a wrong situation.