Wednesday, July 27, 2011

Online Casino Information Breach!

Maybe they should be using PlayerVerify.com to a least view Player documents?

Important security breach at Bet 24 and various other companies! I suspect various other companies mean other online gaming sites not mentioned.

No link for this one, here's the full statement.


25 July 2011

For the attention of customers with BET24 accounts registered before 31 October 2009

Important Security Information - Please Read Carefully


We have been informed by police authorities that they have arrested third party individuals who were in possession of unauthorised copies of personal customer information relating to various companies including BET24. The BET24 customer information was stolen from BET24 by means of illegal electronic access to our database, which is believed to have taken place in December 2009. We have no information to indicate any unauthorised access to our database or breach of our security systems since December 2009, and we have no reason to believe that accounts registered after 31 October 2009 are affected in any way.

FOR CUSTOMERS WITH ACCOUNTS REGISTERED AS AT 28 APRIL 2007, the stolen information comprises:

•a list of customer names, postal addresses, email addresses, dates of birth, BET24 account user names, BET24 account user ID numbers, BET24 account passwords and BET24 account balances, and, in some cases, telephone numbers and IP addresses
•a second separate list of BET24 account user ID numbers, BET24 account balances and parameters, customer payment card expiry dates, encrypted customer payment card numbers and encoded customer payment card types
The encrypted payment card information has NOT to our knowledge been decrypted, and review by internet security specialists confirms that the level of encryption is very high. In addition, NO payment card security codes are stored on the BET24 database. The stolen information is so far known to have been used to access a limited number of customers’ BET24 accounts, third party accounts and personal email accounts. A small number of customers have alerted us to unauthorised activity on their BET24 accounts and we have fully reimbursed them for any financial loss incurred on their accounts. At the bottom of this letter, you will find the security advice and action points that we recommend you to follow immediately.

FOR CUSTOMERS WITH ACCOUNTS REGISTERED BETWEEN 28 APRIL 2007 & 31 OCTOBER 2009, the stolen information is more limited and comprises:

•a list of BET24 account user ID numbers, BET24 account balances and parameters, customer payment card expiry dates, encrypted customer payment card numbers and encoded customer payment card types
This stolen information does NOT include any personal details or passwords and is NOT therefore sufficient to enable access to accounts. Furthermore, we are not aware of any instances of illegal access to these accounts. The encrypted payment card information has NOT to our knowledge been decrypted, and review by internet security specialists confirms that the level of encryption is very high. In addition, NO payment card security codes are stored on the BET24 database. At the bottom of this letter, you will find the general security advice that we advise all BET24 customers to follow.

We are working closely with the police authorities to establish how the information was stolen, how it has been used, and which customers are affected.

We implemented a thorough security review in 2010, which included an audit by industry specialists and simulated hacker penetration tests, and we have further upgraded the security of our network. The BET24 passwords for all customers who had registered accounts as at 28 April 2007 were reset during 2010. We continue to monitor our systems and customer transactions constantly, and to upgrade our systems regularly.

Our customers are our number one priority and the security of your personal information is of paramount importance to us. Please contact our customer service support team by email at support@bet24.com if you have any questions relating to the above.

Yours sincerely,
Thomas Petersen, Chief Executive Officer



RECOMMENDED SECURITY ACTION POINTS

FOR CUSTOMERS WITH ACCOUNTS REGISTERED AS AT 28 APRIL 2007:

•If you have ever used your BET24 password for your email account, then please immediately change your email account password and then change all passwords that you use for any other accounts including your BET24 account
•If you have not used your BET24 password for your email account but have used it for any other services or accounts, please immediately change the passwords for such services or accounts
•If you believe that your BET24 account has been compromised in any way, please contact us immediately by email at support@bet24.com
•Please remain vigilant and regularly review your bank account and payment card statements
•Please ensure that any requests for personal data or resetting of access codes and passwords that you have previously received, or receive in future, via email, phone and post are from trustworthy parties and in accordance with the terms and conditions of the service or account provider to which they relate
FOR CUSTOMERS WITH ACCOUNTS REGISTERED BETWEEN 28 APRIL 2007 & 31 OCTOBER 2009:

•If you believe that your BET24 account has been compromised in any way, please contact us immediately by email at support@bet24.com
•Please avoid using the same passwords for different services or accounts and please immediately reset any such passwords to be different for each service and account
•Please regularly review your bank account and payment card statements
•Please ensure that any requests for personal data or resetting of access codes and passwords that you receive via email, phone and post are from trustworthy parties and in accordance with the terms and conditions of the service or account provider to which they relate

Saturday, July 23, 2011

Online Player Verification Hub

Online players and gaming Web sites needing a secure platform for submitting and reviewing account verification details such as a player ID, proof of address among other requests are finding help at PlayerVerify.com.

Franklin, TN (I-Newswire) July 22, 2011 - Player Verify, LLC, the only company with a mission to ease the verification process between players and gaming sites for added security launched www.PlayerVerify.com in April, 2010. Designed for both online players and the gaming industry, PlayerVerify.com provides the hub and secure technology needed to ease the player hard document verification process between the two groups.

“With our secure system players simply login, upload their documents and send a request to the gaming site for ID document approval,” says Mark Dalton of Player Verify, LLC. “With PlayerVerify.com, players and gaming sites alike can be confident that sensitive personal information remains private, avoiding unsecure email and facsimile that's currently required within the industry.”

Many gaming sites do internal background checks during registration but this isn't foolproof. "At some point and time a drivers license, passport or some other form of hard ID must be checked, it's the internet." With PlayerVerify.com, instead of faxing or e-mailing sensitive documents, players can upload all of their hard document verification details to one portal avoiding stored information on several gaming servers and computers. PlayerVerify.com makes this information accessible to specific gaming sites or operators, who then obtain the information through an access code provided by the player and player only.

PlayerVerify.com provides online gamers with many account features. Players can see who is viewing their personal documents in real-time and have real-time accessibility to see whether those documents are approved or denied by the gaming site. In addition, players have exclusive access to a log that lists who viewed uploaded documents and when, providing an added layer of security. Users can learn almost instantly if an unauthorized person or site is trying to gain access to their information. Players also have the ability to lock their documents upon approval from the gaming site, further preventing unauthorized access.

Online gaming sites also have many benefits to using PlayerVerify.com. Gaming site operators no longer need to sort through faxes or e-mails that contain the personal details of their players. In addition, gaming sites no longer need to worry about how to properly and safely store or dispose of this critical information. Operators can also benefit from PlayerVerify.com’s online approval/denial services and can quickly send requests for further information from players.

For more information about PlayerVerify.com’s revolutionary online system for online gaming players and gaming sites, visit www.playerverify.com.


About Player Verify, LLC:
Player Verification with Secure Document Uploads - Player Verify, LLC provides a secure upload service for Player's to share their personal ID documents with online Gaming sites around the globe. Player Verify, LLC does not verify documents but does provide the most secure central hub where Player's and Gaming site's can interact securely during the ID verification process.

Company Contact Information
Player Verify, LLC
Mark Dalton
2020 Fieldstone Pkwy, ste 900, #133, Franklin TN
37069
Phone : 800-209-7264

Monday, July 4, 2011

GLI-19 Verification Standards



Gaming Laboratories International (GLI) is the world's leading gaming test laboratory. Technical Systems Testing (TST) is a GLI company involved in certification of online casinos. GLI and TST have released the industry's first global online gaming regulatory guidelines, which they have termed as GLI-19.

Among the many standards outlined for Operators and Suppliers I'm particularly interested with their recommendations for Players document security.

As we've pointed out time and time again Players sending personal ID, Credit Card information by email and fax isn't secure. This is why Player Verify was created, Players can share their personal information with Gaming sites in a secure encrypted environment here at PlayerVerify.com.

Full article here.