Bookmaker/Betcris-Security

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • canadaguy
    SBR Rookie
    • 01-19-09
    • 4

    #1
    Bookmaker/Betcris-Security
    Hello,

    Perhaps this issue has been raised before but i could not find a recent
    discussion in the forum arhives...I recently had to contact Bookmaker
    to obtain some log in assitance...I used Live Chat where I had to provide both usernname and passowrd to get assitance...I thought this was very unusual and unsafe...I mentioned this to the support person who assured me that this was their standrad operating procedure. I googleed the issue and sure enough, another site had complaints from players at bookmaker/betcris who complained of both unauthozied wagers and even withdrawals from their accounts...I cannot imagine
    having to provide a customer support person with sufficent details to at the very least make bets in my account without my authority.

    Any thoughts.?
  • bigboydan
    SBR Aristocracy
    • 08-10-05
    • 55420

    #2
    First off, Welcome to the SBR forum sir

    You might want to checkout this link for the info you are seeking.
    Comment
    • Santo
      SBR MVP
      • 09-08-05
      • 2957

      #3
      It is their standard procedure. It is unsafe.
      Comment
      • Santo
        SBR MVP
        • 09-08-05
        • 2957

        #4
        Originally posted by bigboydan
        First off, Welcome to the SBR forum sir

        You might want to checkout this link for the info you are seeking.
        The privacy policy really has nothing to do with the fact they are opening your information to increased chances of intercept.
        Comment
        • CS-Cedrick
          SBR MVP
          • 01-10-09
          • 1578

          #5
          Originally posted by Santo
          The privacy policy really has nothing to do with the fact they are opening your information to increased chances of intercept.
          Just check below on the second option, it's about their security systems.
          Comment
          • Santo
            SBR MVP
            • 09-08-05
            • 2957

            #6
            It's about their credit card processes, and as they say even there it's not perfect.

            However there is a reason that most sites block out your password when you type it in, and that's because of the prevalence of screen scraping. By making you type your password in a live chat session you are opening users up to that, even if we were to assume that the CS Agents and the CRIS Internet connection was 100% foolproof (which I very much doubt).
            Comment
            • CS-Cedrick
              SBR MVP
              • 01-10-09
              • 1578

              #7
              You're right, but if they were intelligent, they might have written that on a protocol or something to have bettor agree to release the information for verification.
              Comment
              • bigboydan
                SBR Aristocracy
                • 08-10-05
                • 55420

                #8
                I think what Cedrick is referring to Santo is this rule:
                6. Each client is required to identify himself by his betting account number and password on each call and each login to BookMaker. The client has sole responsibility for his specific password and account number .
                Comment
                • CS-Cedrick
                  SBR MVP
                  • 01-10-09
                  • 1578

                  #9
                  Originally posted by bigboydan
                  I think what Cedrick is referring to Santo is this rule:
                  Where did you find it big guy?
                  Comment
                  • bigboydan
                    SBR Aristocracy
                    • 08-10-05
                    • 55420

                    #10
                    Under the general rules option and it was #6
                    Comment
                    • CS-Cedrick
                      SBR MVP
                      • 01-10-09
                      • 1578

                      #11
                      Thank you very much sir for clearing that out and for letting us know that protocol really exists.
                      Comment
                      • cap10
                        SBR Sharp
                        • 09-15-07
                        • 494

                        #12
                        hey canadaguy ;;this password issue has bothered me about CRIS for a long time as well;; all u can do is change it after each session which is a pain in the a--;;; fyi;;; bejamaica and wagerstreet have the same practice;;; they all argue that they must have the pw to make sure its really u;;; i did argue witn cs at bjam over the phone that i am not givint my pw over the phone and after a while they agreed;; i just said i was too worried about eavesdropping into cell ph conversations;;
                        Comment
                        • CS-Cedrick
                          SBR MVP
                          • 01-10-09
                          • 1578

                          #13
                          Cap10, that's not a good advice you're giving canadaguy! Customer service is out there to help you guys out, it might not seem that way but there's still some guys out there just like me that enjoy their work helping out fellahs in need, something could be arranged so that both parties end up happy in most cases but, there's policies in every company, and you agreed to them at the moment you open an account with that specific company, I might sound like a blabbermouth but that's the way it is and trust me, there's at least one nice guy in customer service trying to lead you to the light.
                          Comment
                          • tomcowley
                            SBR MVP
                            • 10-01-07
                            • 1129

                            #14
                            There's no reason, other than shoddy business practices, for a password to be visible to anybody on the back end. Some sites have you authenticate before you get to a person in live chat, and all of them should follow that protocol.
                            Comment
                            • HeeeHAWWWW
                              SBR Hall of Famer
                              • 06-13-08
                              • 5487

                              #15
                              Thepig/legendz and betphoenix do the same thing, not good.
                              Comment
                              • TruckerJoe
                                SBR Rookie
                                • 05-08-06
                                • 42

                                #16
                                How do you change your password here?
                                Comment
                                • WileOut
                                  SBR MVP
                                  • 02-04-07
                                  • 3844

                                  #17
                                  You have to call customer service. Then the customer service agent has to get a manager to ok it. That is how its done at DSI at least. I assume Bookmaker is the same way. So that means that possibly at least 2 other people other than you know your password at all times.

                                  Every sportsbook should encorporate the way WSEX and matchbook do it. You change it yourself on the website and you can change it as often as you want. Only you know the password.
                                  Comment
                                  • CS-Cedrick
                                    SBR MVP
                                    • 01-10-09
                                    • 1578

                                    #18
                                    Originally posted by WileOut
                                    You have to call customer service. Then the customer service agent has to get a manager to ok it. That is how its done at DSI at least. I assume Bookmaker is the same way. So that means that possibly at least 2 other people other than you know your password at all times.

                                    Every sportsbook should encorporate the way WSEX and matchbook do it. You change it yourself on the website and you can change it as often as you want. Only you know the password.
                                    Yup, that's the way it is within CRIS.
                                    Comment
                                    • Fizzz
                                      SBR High Roller
                                      • 01-27-09
                                      • 247

                                      #19
                                      Since they are website operators they need your password to track your logs and help you out in some cases. Missing wagers, weird balances and all that... and believe me that they will help you out on these cases.
                                      The password and username asking thingie actually protects you and the company (i guess) from any other player using an account that is not theirs
                                      Comment
                                      • TruckerJoe
                                        SBR Rookie
                                        • 05-08-06
                                        • 42

                                        #20
                                        Originally posted by WileOut
                                        You have to call customer service. Then the customer service agent has to get a manager to ok it. That is how its done at DSI at least. I assume Bookmaker is the same way. So that means that possibly at least 2 other people other than you know your password at all times.

                                        Every sportsbook should encorporate the way WSEX and matchbook do it. You change it yourself on the website and you can change it as often as you want. Only you know the password.
                                        Thanks for that.

                                        Why not get an automatic system in place? Nearly all other books have it
                                        Comment
                                        • Scorpion
                                          SBR Hall of Famer
                                          • 09-04-05
                                          • 7797

                                          #21
                                          Instead of asking for your password they should have a security quaetion and answer when you sign up and ask that instead of your password
                                          It snot good at all they ask for both your account number and password in one session or over the phone
                                          Comment
                                          • Scorpion
                                            SBR Hall of Famer
                                            • 09-04-05
                                            • 7797

                                            #22
                                            What they should do when you signup is to ask for 2 passwords
                                            one for logging in to your account and they shold never ask for it in chat or email
                                            and one for chat and verification and everything else
                                            Comment
                                            • CS-Cedrick
                                              SBR MVP
                                              • 01-10-09
                                              • 1578

                                              #23
                                              Originally posted by Scorpion
                                              What they should do when you signup is to ask for 2 passwords
                                              one for logging in to your account and they shold never ask for it in chat or email
                                              and one for chat and verification and everything else
                                              Actually Scorpion, you can do both things.
                                              Comment
                                              • Champi
                                                SBR Sharp
                                                • 12-20-06
                                                • 373

                                                #24
                                                Its interesting,but today i find Lottery And Gambling Association Malta logo on BetCris site Class 3
                                                Comment
                                                • simmmy
                                                  SBR Hustler
                                                  • 05-27-08
                                                  • 96

                                                  #25
                                                  Originally posted by Champi
                                                  Its interesting,but today i find Lottery And Gambling Association Malta logo on BetCris site Class 3
                                                  It is a worry seeing that.
                                                  Comment
                                                  • Champi
                                                    SBR Sharp
                                                    • 12-20-06
                                                    • 373

                                                    #26
                                                    Class 3 means poker maybe.ANyway i receive 1,5K today for less then an hour
                                                    Comment
                                                    • Fizzz
                                                      SBR High Roller
                                                      • 01-27-09
                                                      • 247

                                                      #27
                                                      In any case man, you can call in or log into the chat and have your regular password changed for another one. This is like the phone or chat password. If you confirm this one, you do not have to change your log in password.
                                                      We can also check from where the transactions are made by IP tracing... so if you want to check on that you can just log in and ask us... it takes a while to do this, but you are free to ask for this info
                                                      Comment
                                                      SBR Contests
                                                      Collapse
                                                      Top-Rated US Sportsbooks
                                                      Collapse
                                                      Working...