Companies have to protect the personal data they collect in proportion to its sensitivity, and gambling companies must be particularly attentive to information security. The data that gambling companies collect is particularly sensitive, meaning a data breach could have a serious adverse impact on their reputation and ultimately …
Rest assured, your data are safe with us
Customer: Wanna bet?
Gambling <=> Gaming?
Am I the only one to note that they use too many characters in describing Sony? AFAIK, Sony was never involved in gambling (well other than taking stupid business decisions, but that's not regulated that way). Methinks there is a "bl" too much, unless I really need more coffee before I read things..
"security requirements and restrictions extend to any sub-contractors"
I'd go further than that.
Make sure your site has no live third party content. And not just for gambling sites, but for any site that ought to be expected to have respect for its customers.
No scripts hosted on third party sites, no third party supplied feeds, no adverts, no google analytics, no ... absolutely nothing whatsoever that isn't being served from your *own* dedicated servers.
You may trust google, your ad server and the company that has given you some free widgets, but your customers probably don't. And even if they do, they probably shouldn't.
Just remember to NOT email your U.S. customers telling them that their online gaming info may have been disclosed.
When I worked in Gib for a gaming company, there was a 'well known' black market in player data - the going rate was about £4 per person I believe. The interesting thing was that even as someone only loosely classed as a technical role (more process management) I had full access to the production databases. And that wasn't uncommon across similar non technical roles in our and other companies out there (everyone socialised together, played cards together etc). Having come from a stricter background, I obviously locked this down for our company fairly quickly and set up proper segregation of roles, rights, access levels etc etc
Then there's the well publicised Absolute Poker / Ultimate Bet fiasco where a cunning developer introduced a nice loophole straight into the production environment and they defrauded people of millions. It's basic stuff, but frightening how little it gets done.
Alderney thinks so too
They've just suspended Full Tilt's gambling license.
- Vid Hubble 'scope snaps 200,000-ton chunky crumble conundrum
- Bugger the jetpack, where's my 21st-century Psion?
- Windows 8.1 Update 1 spewed online a MONTH early – by Microsoft
- Google offers up its own Googlers in cloud channel chumship trawl
- Interview Global Warming IS REAL, argues sceptic mathematician - it just isn't THERMAGEDDON