Connect with us

Latest News

Popular Gambling App Exposed Millions of Users in Massive Data Leak

Published

on

Reading Time: 5 minutes

 

Led by Noam Rotem and Ran Locar, vpnMentor’s research team discovered a data breach on casino gambling app Clubillion.

The breach originated in a technical database built on an Elasticsearch engine and was recording the daily activities of millions of Clubillion players around the world.

Aside from leaking activity on the app, the breached database also exposed private user information.

With this information publicly available, Clubillion’s users were vulnerable to fraud and various online attacks with potentially devastating results.

Company Profile

Clubillion is a free online casino game available for iOS and Android, offering players 30+ free slot games. While each app is listed under a different developer – Ouroboros on iOS and T7 Games on Android – these are most likely owned by the same company.

Both versions of Clubillion were released in 2019 and became instant hits. Each is now ranked the #1 ‘social slots’ casino app on Google Play and the App Store, with a 4.8 star on both.

Timeline of Discovery and Owner Reaction

Sometimes, the extent of a data breach and the owner of the database are obvious, and the issue quickly resolved. But rare are these times. Most often, we need days of investigation before we understand what’s at stake or who’s leaking the data.

Understanding a breach and its potential impact takes careful attention and time. We work hard to publish accurate and trustworthy reports, ensuring everybody who reads them understands their seriousness.

Some affected parties deny the facts, disregarding our research, or playing down its impact. So, we need to be thorough and make sure everything we find is correct and accurate.

In this case, the database was built on Elasticsearch and hosted on Amazon Web Services (AWS), with Clubillion’s name on its apps, and links to assets owned by the company.

Once Clubillion was confirmed as the owner of the database, we reached out to the developers. While awaiting a reply, we also contacted AWS with details of the leak. It was closed a few days later.

  • Date discovered: 19th March 2020
  • Date vendors contacted: 23rd March 2020
  • Date of contact with AWS: 31st March 2020
  • Date of Action: Approx. 5th April 2020

Example of Entries in the Database

Clubillion’s exposed database contained technical logs for millions of Clubillion users around the world, on both iOS and Android devices. Every time an individual player took any action on the app, a record was logged. Examples of records include:

  • “enter game”
  • “win”
  • “lose”
  • “update account”
  • “create account”

During our investigation of the database, new entries continued to appear continuously. We estimated an average of approximately 200 million records per day – and sometimes, considerably more.

In total, this amounted to over 50GB of exposed records in the database every single day.

Within many of these records, were various forms of user Personally Identifiable Information (PII) data, including:

  • IP addresses
  • Email addresses
  • Winnings
  • Private messages

This data breach was truly global, with millions of records originating from Clubillion’s daily users all over the world. The following list is just a sample of countries affected, along with the average number of daily users from each country:

  • USA – 10,000+
  • UK – 2,475+
  • France – 1,650+
  • Israel – 408+
  • Germany – 1,582+
  • Spain – 1,026+
  • Italy – 2,407+
  • Netherlands – 622+
  • Australia – 6,251+
  • Canada – 7,792+
  • Brazil – 3,859+
  • Sweden – 191+
  • Russia – 547+

Other countries affected included Uzbekistan, India, Poland, Romania, Vietnam, Lebanon, Indonesia, Philippines, Pakistan, Thailand, Austria, Hungry, and Latvia.

As you can see, on a single day, 10,000s of individual Clubillion players were exposed. Each one of these players could be targeted by malicious hackers for fraud and cyberattacks – along with millions more whose records were also contained in the database.

Data Breach Impact

Studies have shown that free gambling and gaming apps are especially prone to attacks and hacking from cybercriminals. They are routinely targeted for theft of private data and embedding malicious software on users’ devices.

Despite their popularity, gambling and casino apps often lack transparency, and it can be impossible to know what steps they’re taking to prevent cybercriminals successfully targeting their users.

One study of 23,000 free gambling apps found that: 3,200 posed a ‘moderate risk’ to users; 379 had known security vulnerabilities; 52 contained malicious software.

Any of these issues could be exploited to target app users in a wide range of frauds and cyberattacks, and Clubillion is no different.

With the exposed user PII and knowledge of their activity on the app, hackers could create elaborate schemes to defraud users. For example, some entries also included transaction errors for attempted card payments on Clubillion.

With the information in these transaction errors, hackers could target users with phishing campaigns, with the following aims:

  1. Trick them into providing their credit card details
  2. Trick them into providing additional PII to be used against them in further fraud
  3. Clicking a link that embeds malware, spyware, or ransomware onto their device.

If cybercriminals used Clubillion to embed malware or similar onto a user’s phone, they could potentially hack other apps, access files stored on the device, make calls, and send texts from the hacked device. They could even access a user’s phone contacts and steal the PII data of their friends and family.

Worse still, as people across the globe now find themselves under quarantine or self-isolation, as a result of the Coronavirus pandemic, the impact of a leak like this is potentially even more significant.

Clubillion stands to gain many new users, along with regular users playing more frequently. Hackers will be aware of this and looking for opportunities to exploit any vulnerabilities in the data security of such a massively popular app.

Had criminal hackers discovered Clubillion’s database, they could have targeted millions of people around the world, with devastating results.

Impact on Clubillion and it’s Developers

The most immediate risk for Clubillion is the loss of players. Data security is a growing concern for everyone these days, and this leak could turn many players off the app. Clubillion is not unique, and players have plenty of other choices for free gambling apps.

With fewer players, Clubillion will lose advertising revenue and reduced profits.

As many of Clubillion’s players reside within the EU, the app is under the jurisdiction of GDPR. The rules of GDPR also apply to apps, and Clubillion will need to take specific actions to ensure the regulatory body in charge doesn’t reprimand it.

Finally, Clubillion could also potentially be removed from Google Play and the App Store. Both Apple and Google are clamping down on apps that pose a risk to their users, removing apps embedded with malware, and taking data leaks much more seriously.

Each of these outcomes has a different likelihood of happening, but they would all negatively impact Clubillion’s revenue and business.

Advice from the Experts

Clubillion’s developers could have easily avoided this leak if they had taken some basic security measures to protect the database. These include, but are not limited to:

  1. Securing their servers.
  2. Implementing proper access rules.
  3. Never leaving a system that doesn’t require authentication open to the internet.

Any company can replicate the same steps, no matter its size.

For a more in-depth guide on how to protect your business, check out our guide to securing your website and online database from hackers.

For Clubillion Users

If you play on Clubillion and are concerned about how this breach might impact you, contact the app’s developers directly to find out what steps it’s taking to protect your data.

To learn about data vulnerabilities in general, read our complete guide to online privacy.

It shows you the many ways cybercriminals target internet users, and the steps you can take to stay safe.

How and Why We Discovered the Breach

The vpnMentor research team discovered the breach in Clubillion’s database as part of a huge web mapping project. Our researchers use port scanning to examine particular IP blocks and test different systems for weaknesses or vulnerabilities. They examine each weakness for any data being leaked.

Our team was able to access this database because it was completely unsecured and unencrypted. 

Whenever we find a data breach, we use expert techniques to verify the owner of the database, usually a commercial company.

As ethical hackers, we’re obliged to inform a company when we discover flaws in their online security. We reached out to Clubillion’s developers, not only to let them know about the vulnerability but also to suggest ways in which they could make their system secure.

These ethics also mean we carry a responsibility to the public. Clubillion users must be aware of a data breach that exposes so much of their sensitive data.

The purpose of this web mapping project is to help make the internet safer for all users.

 

Source

Powered by WPeMatico

Continue Reading
Advertisement

Austria

Landmark Player Refund Ruling Threatens Curacao

Published

on

landmark-player-refund-ruling-threatens-curacao

The sprawling tendrils of the player refund drama look to finally have ensnared Curacao, much in the way they have imperilled Malta for the past few years, after a local court ruled that a refund owed to a player in Austria must be paid by an operator based on the Caribbean island.

Experts believe the ruling marks a turning point for Curacao in the long-running player refund saga — the attempts by players to reclaim all of their losses from offshore operators in European grey markets.

Last week, the highest legal authority of the Dutch Caribbean islands — The Joint Court of Justice of Aruba, Curaçao, Sint Maarten, and of Bonaire, St. Eustatius and Saba — found in favour of an Austrian gambler.

The individual had originally won their case back in 2023, when an Austrian court ruled that she was entitled to all of the €25,518.42 lost to Raging Rhino N.V., which operates the brand LuckyDays.

This ruling is just one of thousands that have been issued in Austria and Germany over the past five years, with hundreds of millions of euros in refunds either already paid out via judgements and settlements or, more likely, blocked by gambling-friendly jurisdictions.

For the most part, this wave of pro-player judgements has created issues for Malta, where a larger number of current and former grey market gambling providers are headquartered.

That ultimately led to the infamous Bill 55, a piece of legislation which empowers judges in Malta to block rulings from foreign courts against local gambling companies, on the grounds that permitting the refunds to go ahead would violate the country’s public order.

Bill 55 remains highly controversial and is coming under sustained pressure from a series of cases currently being heard before the Court of Justice of the European Union (CJEU).

Order maintained

Curacao has also traditionally offered a friendly environment for online gambling operators, albeit with a considerably more tarnished reputation than Malta.

So it has come as a surprise to many observers that judges in the Raging Rhino case have ultimately sided with lawyers attempting to transfer a refund judgement from Austria.

According to reports in the Curacao Chronicle, Raging Rhino attempted to match the Maltese defense, arguing that allowing the refund to go through would violate Curacao’s public order

Judges also refused to allow the gambling company to re-litigate the case in any way, asserting that their task was simply establishing whether the foreign judgment could be safely recognised in Curacao.

Raging Rhino were also ordered to pay €2,286.72 in legal costs, the Chronicle said.

A tipping point

Although the volume of cash involved in this case is relatively minor, it represents the tip of a potentially vast iceberg that could cost operators in Curacao huge sums.

Lawyers and litigating funding companies have spent years finding potential clients and buying up claims from anyone who gambled in Austria and Germany with an operator without a local licence.

That includes plenty of gambling companies in Curacao, which has long hosted a bustling offshore gambling community.

Until recently, that sector was almost completely hidden by opaque layers of regulation, however recent reforms on the island have forced operators to apply for new licence and, in so doing, join a public register that displays their status.

According to that register, Raging Rhino’s Curacao licence expired on March 26, but it has an application which is currently being assessed.

Although this new era of transparency remains the target of criticism, last week’s ruling demonstrates that forcing companies out into the open is also opening them up to greater legal risk.

The Raging Rhino judgement is blood in the water for the many legal teams and litigating funding firms that have hundreds, if not thousands, of player refund cases on their books.

With major support from Malta, lawyers representing gambling companies have been fairly successful in protecting their clients, following an initial wave of settlements.

Although the tide may be gradually turning against the industry, thanks to the CJEU, pro-industry lawyers still believe that player lawyers who have spent considerable sums acquiring claims are desperate to find ways to generate income while they remain stymied by Bill 55.

A weak point in the armour of Curacao operators, who have for so long resisted any international enforcement, is likely to spur a flurry of new claims and attempts to have judgments transferred from Germany and Austria.

At least one expert in online gambling law believes that this judgment will effectively end all operations in Germany and Austria for Curacao-based companies.

This would mirror the experience of Malta, which saw its local operators pushed out of Austria by the threat of refund judgments.

Maltese firms that chose not to apply for an online slots or betting licence have also exited Germany.

With judges having established a precedent that European refund judgments can be transferred to Malta, a wave of similar cases is sure to follow, raising serious questions about the status of Curacao as a haven for the offshore online gambling industry.

The post Landmark Player Refund Ruling Threatens Curacao appeared first on Eastern European Gaming | Global iGaming & Tech Intelligence Hub.

Continue Reading

Latest News

Loud Launches, Quiet Exits Why Partner Culture Outlasts Partner Acquisition

Published

on

loud-launches,-quiet-exits-why-partner-culture-outlasts-partner-acquisition

London is a city built on institutions that never needed to announce themselves. The law firms on Chancery Lane, the private clubs in St. James’s they endure not through attention, but through trust accumulated over decades. Quietly. Consistently. Without a rebrand every two years. Which makes London an interesting backdrop for the affiliate industry’s annual conversation with itself. Because iGaming, by contrast, has mastered the art of attention.Conference floors are fluent in volume: oversized visuals, stacked merchandise, account managers with pitch decks and a practiced sense of urgency. Every programme is premium. Every stand is exclusive. What it rarely produces is what the spreadsheet actually needs: long-term ROI, partner retention, relationships worth more in year three than month one.

The Market Learned to Perform Premium. It Forgot to Practice It.

When an entire market adopts the same vocabulary premium, VIP, exclusive, top-tier the signal stops carrying information. The gifting mechanics follow the same logic: items chosen for the photograph rather than the relationship. With this approach the partner is the audience, not the counterpart.

The structural problem is this: markets that compete on noise attract partners who respond to noise, and lose them the moment a louder offer comes along. Attention is not loyalty. Activation is not retention.

High-performing affiliate partnerships share a different architecture: predictability over promises, honest communication over promotional language, consistency whether a relationship is new or years old. Strong partners don’t leave for marginal CPA improvements when the relationship itself has value they’d be giving up. That dynamic reduces churn, extends LTV, and compounds over time in ways no single activation can replicate.

Manor as Model: The Economics of Restraint

PlayamoPartners’ presence at iGB London stand H-60, 1–2 July  operates on this logic. The Manor concept takes the British manor as its central metaphor: not a venue, but a model of relationships. There is an etiquette, a code, standards that everyone inside understands. Membership implies alignment.

The aesthetic is restraint. The underlying logic is economic. Trust, in this industry, has a measurable ROI that most programmes never stop to calculate because they’re too busy announcing it.

The Code of Honor: Giving the Industry Its Memory Back

At the centre of the Manor experience is a physical book not a lookbook or catalogue, but a Code of Honor: partner feedback, written by partners themselves, accumulated across events and years. A physical record implies that what partners say is worth keeping in a form that persists that the relationship has a history worth preserving.

The iGaming industry has become extremely efficient at forgetting. Campaigns replace campaigns. Account managers cycle through. Programmes pivot quarterly. The Code of Honor is a deliberate counter to that tendency. It treats reputation not as a marketing asset but as something that grows through repeated honest interaction. An archive of trust, built over time.

Recognition Over Raffle

Partners who contribute to the Code of Honor become eligible for recognition items including a MacBook Neo 13, iPhone Air, and iPad Air. Come by on 02.07 at 14 o’clock and collect your prize.

The framing matters. These are not raffle prizes. Recognition is relational: you are who you are, and that is acknowledged. One is a CPA model applied to gifting. The other is how relationships between people who respect each other actually function.

The partners the Manor is designed for are not the ones who show up for a giveaway they’re the ones who show up to engage, to leave something of their own behind, to participate in the ongoing record of what this programme is.

Continuity of Standards

This approach isn’t new for PlayamoPartners. Past recognition has included Samsonite, Hugo Boss, TAG Heuer, Cartier, YSL. At iGB London, partners at H-60 will find Cartier wallets and MacBooks among the acknowledgements.

Premium gifting delivered consistently, to partners aligned with programme standards, across multiple years and conferences, reads differently from a one-time budget line. It signals a stable set of values with no particular need for an audience.

What Remains After the Conference Floor Clears

Rates, tools, tracking platforms are table stakes. Any serious programme can match them within a quarter. What cannot be quickly replicated is culture: honest communication, payments that arrive without chasing, account managers who know your business well enough to have an opinion about it.

Manor of PlayamoPartners arrives at iGB London not as an activation, but as a position. Behind it: a system, a reputation, a code of conduct that predates this event and will outlast it.

Stand H-60 | 1–2 July | iGB London

Contact the team:

The post Loud Launches, Quiet Exits Why Partner Culture Outlasts Partner Acquisition appeared first on Eastern European Gaming | Global iGaming & Tech Intelligence Hub.

Continue Reading

Asia

PhilWeb Showcases Technology-Driven Growth Vision at SiGMA Asia 2026

Published

on

philweb-showcases-technology-driven-growth-vision-at-sigma-asia-2026

PhilWeb Corporation has reinforced its position as a technology-driven company at SiGMA Asia 2026, highlighting its continuing transformation through digital innovation, scalable platform solutions and strategic technology investments aligned with the rapidly evolving digital economy in Asia.

As one of the Philippines’ established technology and platform providers, PhilWeb participated in SiGMA Asia 2026 to showcase its long-term vision centered on digital infrastructure, operational scalability, customer engagement technologies and future-ready platform development. The company’s presence at the international event reflects its broader strategy of strengthening its role within the growing technology, digital entertainment and fintech ecosystem in the region.

With more than 25 years of operational experience, PhilWeb continues to evolve alongside changing market demands and technological advancements. Over the years, the company has steadily expanded its capabilities through investments in platform modernization, integrated digital systems, payment technologies and data-driven operational tools designed to support scalable and efficient business operations.

As industries across Asia continue to undergo digital transformation, PhilWeb sees increasing opportunities in technology-enabled ecosystems where connectivity, automation, customer experience and operational efficiency play increasingly important roles in long-term business growth.

At SiGMA Asia 2026, the company highlighted initiatives focused on strengthening its digital ecosystem through improved platform capabilities, enhanced payment integration infrastructure and technology solutions designed to support seamless experiences across both physical and digital customer environments.

PhilWeb also emphasised the growing importance of integrated platforms and scalable digital operations as consumer behaviour continues to shift toward more connected and technology-driven experiences. The company continues to adapt to these evolving trends by exploring innovations that improve accessibility, operational flexibility and customer engagement.

Participation at SiGMA Asia 2026 also provided PhilWeb with opportunities to engage with international technology firms, fintech companies, digital infrastructure providers, payment solutions companies and regional business partners as it continues to strengthen its long-term growth strategy.

Beyond technology expansion, PhilWeb continues to prioritise governance, compliance-driven systems, operational transparency and sustainable business.

The post PhilWeb Showcases Technology-Driven Growth Vision at SiGMA Asia 2026 appeared first on Eastern European Gaming | Global iGaming & Tech Intelligence Hub.

Continue Reading

Trending

Get it on Google Play

Fresh slot games releases by the top brands of the industry. We provide you with the latest news straight from the entertainment industries.

The platform also hosts industry-relevant webinars, and provides detailed reports, making it a one-stop resource for anyone seeking information about operators, suppliers, regulators, and professional services in the European gaming market. The portal's primary goal is to keep its extensive reader base updated on the latest happenings, trends, and developments within the gaming and gambling sector, with an emphasis on the European market while also covering pertinent global news. It's an indispensable resource for gaming professionals, operators, and enthusiasts alike.

Contact us: [email protected]

Editorial / PR Submissions: [email protected]

Copyright © 2015 - 2024 - Recent Slot Releases is part of HIPTHER Agency. Registered in Romania under Proshirt SRL, Company number: 2134306, EU VAT ID: RO21343605. Office address: Blvd. 1 Decembrie 1918 nr.5, Targu Mures, Romania