View New Posts
  1. #1

    Default Bookmaker/Betcris-Security

    Hello,

    Perhaps this issue has been raised before but i could not find a recent
    discussion in the forum arhives...I recently had to contact Bookmaker
    to obtain some log in assitance...I used Live Chat where I had to provide both usernname and passowrd to get assitance...I thought this was very unusual and unsafe...I mentioned this to the support person who assured me that this was their standrad operating procedure. I googleed the issue and sure enough, another site had complaints from players at bookmaker/betcris who complained of both unauthozied wagers and even withdrawals from their accounts...I cannot imagine
    having to provide a customer support person with sufficent details to at the very least make bets in my account without my authority.

    Any thoughts.?
    Last edited by canadaguy; 01-19-09 at 12:01 AM. Reason: typos

  2. #2

    Default

    First off, Welcome to the SBR forum sir

    You might want to checkout this link for the info you are seeking.

    SBR Founder Join Date: 8/10/2005


  3. #3

    Default

    It is their standard procedure. It is unsafe.

    SBR Founder Join Date: 9/8/2005


  4. #4

    Default

    Quote Originally Posted by bigboydan View Post
    First off, Welcome to the SBR forum sir

    You might want to checkout this link for the info you are seeking.
    The privacy policy really has nothing to do with the fact they are opening your information to increased chances of intercept.

    SBR Founder Join Date: 9/8/2005


  5. #5

    Default

    Quote Originally Posted by Santo View Post
    The privacy policy really has nothing to do with the fact they are opening your information to increased chances of intercept.
    Just check below on the second option, it's about their security systems.

  6. #6

    Default

    It's about their CC processes, and as they say even there it's not perfect.

    However there is a reason that most sites block out your password when you type it in, and that's because of the prevalence of screen scraping. By making you type your password in a live chat session you are opening users up to that, even if we were to assume that the CS Agents and the CRIS Internet connection was 100% foolproof (which I very much doubt).

    SBR Founder Join Date: 9/8/2005


  7. #7

    Default

    You're right, but if they were intelligent, they might have written that on a protocol or something to have bettor agree to release the information for verification.

  8. #8

    Default

    I think what Cedrick is referring to Santo is this rule:
    6. Each client is required to identify himself by his betting account number and password on each call and each login to BookMaker. The client has sole responsibility for his specific password and account number .

    SBR Founder Join Date: 8/10/2005


  9. #9

    Default

    Quote Originally Posted by bigboydan View Post
    I think what Cedrick is referring to Santo is this rule:
    Where did you find it big guy?

  10. #10

    Default

    Under the general rules option and it was #6

    SBR Founder Join Date: 8/10/2005


  11. #11

    Default

    Thank you very much sir for clearing that out and for letting us know that protocol really exists.

  12. #12

    Default

    hey canadaguy ;;this password issue has bothered me about CRIS for a long time as well;; all u can do is change it after each session which is a pain in the a--;;; fyi;;; bejamaica and wagerstreet have the same practice;;; they all argue that they must have the pw to make sure its really u;;; i did argue witn cs at bjam over the phone that i am not givint my pw over the phone and after a while they agreed;; i just said i was too worried about eavesdropping into cell ph conversations;;

  13. #13

    Default

    Cap10, that's not a good advice you're giving canadaguy! Customer service is out there to help you guys out, it might not seem that way but there's still some guys out there just like me that enjoy their work helping out fellahs in need, something could be arranged so that both parties end up happy in most cases but, there's policies in every company, and you agreed to them at the moment you open an account with that specific company, I might sound like a blabbermouth but that's the way it is and trust me, there's at least one nice guy in customer service trying to lead you to the light.

  14. #14

    Default

    There's no reason, other than shoddy business practices, for a password to be visible to anybody on the back end. Some sites have you authenticate before you get to a person in live chat, and all of them should follow that protocol.

  15. #15

    Default

    Thepig/legendz and betphoenix do the same thing, not good.
    200pts

    SBR POKER TOURNEY1st Place 5/5/2012

    175 pts

    3-QUESTION
    SBR TRIVIA WINNER 05/24/2012

    805pts

    SBR POKER TOURNEY1st Place 5/19/2012

    12,560

    SBR POKER TOP 100

    20th Place 11/1/2011

    590pts

    SBR POKER TOURNEY1st Place 5/5/2012

    1500pts

    SBR WORLD
    POKER CUP
    2nd Place 2012

    200pts

    SBR POKER TOURNEY1st Place 4/28/2012

    725pts

    SBR POKER TOURNEY1st Place 4/28/2012


  16. #16

  17. #17

    Default

    You have to call customer service. Then the customer service agent has to get a manager to ok it. That is how its done at DSI at least. I assume Bookmaker is the same way. So that means that possibly at least 2 other people other than you know your password at all times.

    Every sportsbook should encorporate the way WSEX and matchbook do it. You change it yourself on the website and you can change it as often as you want. Only you know the password.

  18. #18

    Default

    Quote Originally Posted by WileOut View Post
    You have to call customer service. Then the customer service agent has to get a manager to ok it. That is how its done at DSI at least. I assume Bookmaker is the same way. So that means that possibly at least 2 other people other than you know your password at all times.

    Every sportsbook should encorporate the way WSEX and matchbook do it. You change it yourself on the website and you can change it as often as you want. Only you know the password.
    Yup, that's the way it is within CRIS.

  19. #19

    Default

    Since they are website operators they need your password to track your logs and help you out in some cases. Missing wagers, weird balances and all that... and believe me that they will help you out on these cases.
    The password and username asking thingie actually protects you and the company (i guess) from any other player using an account that is not theirs

  20. #20

    Default

    Quote Originally Posted by WileOut View Post
    You have to call customer service. Then the customer service agent has to get a manager to ok it. That is how its done at DSI at least. I assume Bookmaker is the same way. So that means that possibly at least 2 other people other than you know your password at all times.

    Every sportsbook should encorporate the way WSEX and matchbook do it. You change it yourself on the website and you can change it as often as you want. Only you know the password.
    Thanks for that.

    Why not get an automatic system in place? Nearly all other books have it

  21. #21

    Default

    Instead of asking for your password they should have a security quaetion and answer when you sign up and ask that instead of your password
    It snot good at all they ask for both your account number and password in one session or over the phone

    SBR Founder Join Date: 9/4/2005


  22. #22

    Default

    What they should do when you signup is to ask for 2 passwords
    one for logging in to your account and they shold never ask for it in chat or email
    and one for chat and verification and everything else

    SBR Founder Join Date: 9/4/2005


  23. #23

    Default

    Quote Originally Posted by Scorpion View Post
    What they should do when you signup is to ask for 2 passwords
    one for logging in to your account and they shold never ask for it in chat or email
    and one for chat and verification and everything else
    Actually Scorpion, you can do both things.

  24. #24

    Default

    Its interesting,but today i find Lottery And Gambling Association Malta logo on BetCris site Class 3

  25. #25

    Default

    Quote Originally Posted by Champi View Post
    Its interesting,but today i find Lottery And Gambling Association Malta logo on BetCris site Class 3
    It is a worry seeing that.

  26. #26

    Default

    Class 3 means poker maybe.ANyway i receive 1,5K today for less then an hour

  27. #27

    Default

    In any case man, you can call in or log into the chat and have your regular password changed for another one. This is like the phone or chat password. If you confirm this one, you do not have to change your log in password.
    We can also check from where the transactions are made by IP tracing... so if you want to check on that you can just log in and ask us... it takes a while to do this, but you are free to ask for this info

Top