Curious,  you say the fingerprint is unique to each machine.  But as far as I know there are only a few things truly unique to each machine and none of them should be available to js or a browser without actually hacking the machine.  Those would be the HD serial (in the case of windows machines it makes a unique serial upon formatting),  the machines network card mac address, and the gateway devices mac address.  None of these are available to js or a browser with only 1 exception,  java can access those.  

So im curious what else you consider as unique?  Obviously its not the email  or btc adderess because that ss you just showed has tons of accounts with the same fingerprint and the site doesnt allow duplicate btc or emails.  So its something else or wetsuit is abusing malware to access things he should not be.  I suppose the external ip could also be,  but i thought freebitco had measures against that already so making a fingerprint that uses the ip seems silly as it would then make better sense to simply use the ip for ease of human readability.  That to me would be like making another md5sum of an existing md5sum,  pointless heh.

 Another would be browser canvas fingerprinting but that is NOT unique to each machine and is an seo marketing tactic to group machines into similar categories to display targeted ads.  So a lot of machines would have the same fingerprint yet have nothing to do with each other other than the fact that they like similar things such as freebitco and other crypto places probably.  Its not a security method to identify specific machines.  Is he actually trying to use canvasing as a security measure?  I surely hope not or you will have ALOT more problems like you just had with this guy by falsely accusing his account.  Any security person would know you never use canvasing for anything other than marketing.  Sounds to me like wetsuit may need help in the security dept maybe.

I just tested my theory and it appears I am correct.  Different browsers on the same machine produced different fingerprints.  I think hes trying to use canvas printing incorrectly and thats really bad.  Alot of innocent people are going to get grouped into buckets with bad people and we have an example already.  The fingerprinting seems to be something new also as it didnt exist for login until recently.  Now it requires the fingerprint id to login.  I dont like wetsuit at all,  but some friendly advice would be to stop attempting to use canvasing as a security measure.  Its going to fail more than its successful.

Yeah, that one was easy to spot and ban. Might even be the same guy that then tried another tactic to try and fool us.

The bug was that you could change the email address to one already in use after creating the account but we fixed that a while ago. It looks like you probably had a few people with a thousand or so accounts each. One of them used a little loophole in Gmail that allows addresses with dots to all go to the same mailbox.

It was a bug but it has been fixed now. That has nothing to do with security either.

It's a mixture of things but we only delete accounts if we are 100% sure it is abuse. Apart from the emails and IPs every device has an individual fingerprint. This is a sample section of the ones that got deleted.

OK, I've had a look at your account and it seems that you had 7,849 mainly using the same email addresses and/or IP addresses to abuse free rolls. Would you like me to publish the full list?

BTC addresses will do. What about the ones you claimed were deleted?  That just doesn't happen so please don't spread lies.

That's not possible. We don't delete accounts, all referrals are for life. If you have the user IDs I'll be happy to investigate.

We have increased the MULTIPLY BTC commissions from 0.25% to 0.40% of the amount that your referral wagers! Refer more users to play MULTIPLY BTC and start earning big!

No, you're fine using a proxy but there might be more restrictions on the free rolls if you don't meet minimum wagering and/or balance requirements, or if someone else uses the same IP address.

Iran, India, China, Russia and others! Gang one word.

Roskomnadzor, Russia from July 1 began to block IP-addresses and sites that have gaming services. In one day, the activity of 22,000 sites with the presence of game services is prohibited. Block any sites with the presence of the game service. I'm shocked!

No probs here...

Site is up and running as far as I can tell. Was able to claim satoshis.

Hi.
My friend wanted to be my referral, i just created an account for him (id:14340896). He sent the whole 0.012btc he had via slow payment, then he wanted to log in to his new account, when the site asked him to check his email, he accidentally clicked on "permanently delete!!!!"link.
He is 2k kilometers away from me, if he was here I'll murder him.
Please tell me that you can recover the account for us.

His old account: 2619517
New (deleted) account: 14340896
P.S:
The transaction completed, he lost his coins because he is a fool !
New(deleted) account's deposit address: https://blockchain.info/address/1FHdE2wDLTXJzi3SwhDVjsgTwpwwEnopyF

Which email? Can you PM me a screenshot of that so I can work out what you trying to explain?

Its not a question of "can",  but rather "will".  But you can append "not" to that and you have your answer.