Companies have to protect the personal data they collect in proportion to its sensitivity, and gambling companies must be particularly attentive to information security. The data that gambling companies collect is particularly sensitive, meaning a data breach could have a serious adverse impact on their reputation and ultimately …
Rest assured, your data are safe with us
Customer: Wanna bet?
Gambling <=> Gaming?
Am I the only one to note that they use too many characters in describing Sony? AFAIK, Sony was never involved in gambling (well other than taking stupid business decisions, but that's not regulated that way). Methinks there is a "bl" too much, unless I really need more coffee before I read things..
"security requirements and restrictions extend to any sub-contractors"
I'd go further than that.
Make sure your site has no live third party content. And not just for gambling sites, but for any site that ought to be expected to have respect for its customers.
No scripts hosted on third party sites, no third party supplied feeds, no adverts, no google analytics, no ... absolutely nothing whatsoever that isn't being served from your *own* dedicated servers.
You may trust google, your ad server and the company that has given you some free widgets, but your customers probably don't. And even if they do, they probably shouldn't.
Just remember to NOT email your U.S. customers telling them that their online gaming info may have been disclosed.
When I worked in Gib for a gaming company, there was a 'well known' black market in player data - the going rate was about £4 per person I believe. The interesting thing was that even as someone only loosely classed as a technical role (more process management) I had full access to the production databases. And that wasn't uncommon across similar non technical roles in our and other companies out there (everyone socialised together, played cards together etc). Having come from a stricter background, I obviously locked this down for our company fairly quickly and set up proper segregation of roles, rights, access levels etc etc
Then there's the well publicised Absolute Poker / Ultimate Bet fiasco where a cunning developer introduced a nice loophole straight into the production environment and they defrauded people of millions. It's basic stuff, but frightening how little it gets done.
Alderney thinks so too
They've just suspended Full Tilt's gambling license.
- Updated Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
- Elon Musk's LEAKY THRUSTER gas stalls Space Station supply run
- Windows 8.1, which you probably haven't upgraded to yet, ALREADY OBSOLETE
- Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
- Android engineer: We DIDN'T copy Apple OR follow Samsung's orders