back to article Gambling companies must be extra careful with personal data

Companies have to protect the personal data they collect in proportion to its sensitivity, and gambling companies must be particularly attentive to information security. The data that gambling companies collect is particularly sensitive, meaning a data breach could have a serious adverse impact on their reputation and …

COMMENTS

This topic is closed for new posts.
  1. Michael H.F. Wilkinson Silver badge
    Coat

    Rest assured, your data are safe with us

    Customer: Wanna bet?

  2. Fred Flintstone Gold badge

    Gambling <=> Gaming?

    Am I the only one to note that they use too many characters in describing Sony? AFAIK, Sony was never involved in gambling (well other than taking stupid business decisions, but that's not regulated that way). Methinks there is a "bl" too much, unless I really need more coffee before I read things..

  3. Harry
    Alert

    "security requirements and restrictions extend to any sub-contractors"

    I'd go further than that.

    Make sure your site has no live third party content. And not just for gambling sites, but for any site that ought to be expected to have respect for its customers.

    No scripts hosted on third party sites, no third party supplied feeds, no adverts, no google analytics, no ... absolutely nothing whatsoever that isn't being served from your *own* dedicated servers.

    You may trust google, your ad server and the company that has given you some free widgets, but your customers probably don't. And even if they do, they probably shouldn't.

  4. Anonymous Coward
    Anonymous Coward

    uh oh.

    Just remember to NOT email your U.S. customers telling them that their online gaming info may have been disclosed.

  5. Vlad The Impugner
    Pirate

    Process

    When I worked in Gib for a gaming company, there was a 'well known' black market in player data - the going rate was about £4 per person I believe. The interesting thing was that even as someone only loosely classed as a technical role (more process management) I had full access to the production databases. And that wasn't uncommon across similar non technical roles in our and other companies out there (everyone socialised together, played cards together etc). Having come from a stricter background, I obviously locked this down for our company fairly quickly and set up proper segregation of roles, rights, access levels etc etc

    Then there's the well publicised Absolute Poker / Ultimate Bet fiasco where a cunning developer introduced a nice loophole straight into the production environment and they defrauded people of millions. It's basic stuff, but frightening how little it gets done.

  6. Vlad The Impugner
    Alert

    Alderney thinks so too

    They've just suspended Full Tilt's gambling license.

This topic is closed for new posts.

Other stories you might like