Password policies

[lost4]

All sportsbook demand their customers to keep passwords secret.

But some books (especially in Costa Rica) always ask for my password themselves when contacting support. If I tell it to them, it is no longer secret.
Their explanation is always: We already have your password, you only have to confirm it as proof of identity.
But there are other ways to confirm my identity to their staff. I even doubt that you can get any information from support which has to be hidden from other people knowing my account number.

I am very concerned about such a policy. You can imagine what people can do with your account when they know your password. Support workers do not earn as much that they are immune to make some extra money.

What is SBR's opinion about this issue? Have you ever discussed this with your top rated books? I would be glad if top ratings were only given to books where noone knows my password.

[trumpdown]

Paranoia can be an evil drug

[Stacocakes]

I always wondered why this happens as well. I know BetCris is one of the books that asks for your password when you talk to them in live chat. Not really something I want to give to them really

[sportsbetwin]

Had it as Cris and Legends. I would think cs reps would have access to customers passwords anyway. But I do not feel comfortable with giving my password details out - even when they reassure that everything is secure.

[Keith Richard]

I've never liked it either when they ask.Seems unnecessary when you can ask a lot of other personal questions like mothers's maiden name etc.

[JohnAnthony]

I only play with Pinnacle. Rule of Thumb: NEVER give out your password. All A+ books should and all A- and above POKER rooms clearly ASK you NOT to give out your password to ANYone. They will never ask you for a password.

[trixtrix]

I only play with Pinnacle. Rule of Thumb: NEVER give out your password. All A+ books should and all A- and above POKER rooms clearly ASK you NOT to give out your password to ANYone. They will never ask you for a password.

this is 100% wrong

[bachngocduong]

I only play with Pinnacle. Rule of Thumb: NEVER give out your password. All A+ books should and all A- and above POKER rooms clearly ASK you NOT to give out your password to ANYone. They will never ask you for a password.

5dimes ask your a password

[lost4]

[quote=sportsbetwin;3121955]I would think cs reps would have access to customers passwords anyway. [quote]

I consider this the main problem. It is not necessary to give them access.

Telling my password to people who already know it makes no further insecurity (assumed nobody listens to the conversation).

Why do these books consider my account safe with all their staff knowing my password, but unsafe when I tell it to a friend?

[blix177]

you try to do a book to book transfer with 5dimes and not give your password lol

[trumpdown]

Just wanted to add I don't like it either, but not much we can do about it. ie: updated my address at a book and they wanted username + password in the body of an email. Real secure....

For some added confidence I will disable all casino play, and with the slim chance an account ever gets hijacked I'll do my best to cover any false wagers with other books (if the hijacked book in question isn't getting credited back fast enough during an investigation)

[MrX]

It's a poor practice to give CS clerks access to client passwords, but it is very common. I can only imagine what the turnover rate is for CS personnel, and how often they leave disgruntled.

What's infuriating is that books will choose this procedure and then tell the client that it's the clients responsibility to protect their username and password when something goes wrong. I hope SBR takes these procedures into account when investigating hacked-account disputes. A book with shoddy security protocols should definitely be held partly resposible when one of it's players claims that his account was hacked.

[sportsbetwin]

For some added confidence I will disable all casino play, and with the slim chance an account ever gets hijacked I'll do my best to cover any false wagers with other books

Disabling casino play is great advice - if your account gets hacked then that is most likely where the funds will evaporate.

Covering false sports wagers will also have the risk of being exposed on the other side if the false bets are cancelled - then you will have to cover your covers!!

[OMGRandyJackson]

Book Maker asks for pw when you contact them.

[ringemup]

Disabling casino play is great advice - if your account gets hacked then that is most likely where the funds will evaporate.

Covering false sports wagers will also have the risk of being exposed on the other side if the false bets are cancelled - then you will have to cover your covers!!

yup, this happened to mi bro, sum bleephole working for the book decided to play a 250 dolar hand of BJ 4 fun cuz mi bro had a pretty large balance of 5K in there or so few yrs bak. security mi ass.

[skrtelfan]

Some books refuse to let you disable casino play.

In addition to the giving the password to the clerk thing, some books don't let you easily change your password, and other books refuse to let you have passwords longer than a certain length or with anything other than letters and numbers. Some books routinely send passwords by email. All of these are bad policies, probably worse than giving clerks access to passwords.

[sportsbetwin]

Also be careful about the password on your primary email account - if it is gmail, yahoo etc.

Mine got hacked last year and they used the lost password function to hack and clean out my moneybookers and paypal account.

Got most of it back - but it was stressful and the best lesson I ever got in password security (and online security in general)

[hhsilver]

When I joined some books to play BTP, in many cases the welcome email I got had my username AND password right there in the insecure email.. We are always warned that email is not secure and sensitive info should not be sent. This was very disturbing.

Also, the same as many said above - clerks ask for password. I hate it , but I got used to it.

I'd like to see some response from SBR about this.

Another concern I've had is that matchbook is not a so-called secure site. In the address bar, there is no "S" following the http. That should be there for secure sites. Matchbook is the only book where firefox doesn't seem to recognize that I am logging in to something. I don't get prompted about firefox remembering password. I have to enter each time - unlike every other book where I've played. Is this the case for the rest of you?

[storm70]

Sending password by e-mail are disturbing and asking for password are worse as there are other personal question they could ask