The possible hack does not have to come from your computer, though no matter how much you seem to be going on safety websites, you can't be 100% sure. justification for being hacked is becoming more and more common by fraudsters.
Can you share here all your conversation with his support about this problem? Also, it will be fine if we can hear the explanation from
CryptoPokerClubedit: I support your flag which can be revised if evidence something else.
I understand what you mean. Crypto Poker Club support explanation was basically that my computer was compromised by virus or malware.
However I was playing in many poker sites at the same time and no other accounts were "hacked".There is few facts that make it obvious they took the funds:
1)In case of forgotten password they just sent you the new one. No one does that!!! This is means that they can change the password at any time and log in(it explain why i was't able to log in with my original password)
2)The withdraw was approved for 9 min even thought someone log in from different IP address from Germany. And here I need to mention that I live in Canada and never played from other location since I create the account on September 2018. Here you have to consider the large amount of cash out 4btc - usually sites take extra time for such a large number.
On top of that If it was a real hacker he would leave me with 0. They just wanted to lured me in to keep earning them rake by leaving(0.6btc) and refunding (1.17btc) on the site.
In the beginning I was thinking that someone from their team took the funds. Clearly I wasn't aware of their previous scams and bad history or I would never play there.
"This way the poker account can be compromised and one of you employees can have access to the new password" - my statement
Here is CPC explanation about the password:
Your account did not request a new password before being logged into therefore how would a staff member know what the password was? Even with full admin access all passwords are encrypted and the database would not be readable like that.
Also it won't be possible for someone to log into your account without it showing up in your login history therefore it would be obvious that a staff member did so.
Lastly the forgot password feature was not used in your case and the new password was only sent after the account report was made by you.
This means that:
A member of staff would not be able to access your account without resetting your password which would then be visible to all that someone did that
A member of staff can't simply access the database and retrieve it due to encryption
Logs and server activity cannot be overridden or turned off due to architecture built into the servers which is outside the visibility/control of the support staff
Even if logs and server activity could somehow be manipulated (which it cannot); you would need full server level root access which staff members do not have for security reasons far greater than simply account institution. The server admins do not have access to the platform's general control panel and cannot see players accounts meanwhile the platform's moderators have access to accounts (like an admin portal) but do not have root access to the servers (the mechanism of which controls the totality of the platform).
To help you understand how the management process works we have two groups of admin staff. The day to day 'moderation team' and the 'server technology team'.
The moderation team handles daily management tasks, setting up games/tables, handling of general account queries and managing support. They have a special admin portal which they can execute all tasks as needed. Only specific and certain tasks can be done through the portal.
The server team handles server uptime, works on updates & fixes as well as works on new features. They strictly do not have any method of accessing what the moderation team can see and they do not need it. A staging server is created from their end replicating the entire platform without real funds or players. This way updates and fixes can be achieved with testing before new updates are pushed live. It also helps recreate problems that the live server may have without impacting live games.
A similar principle is applied for our card shuffling (RNG) mechanisms making it tamper proof which can be read in our whitepaper that was released in 2018. Again in the RNG model - the staff do not have access to the RNG units and due to the architecture built - no staff member can know which cards are going to be generated next (even with full admin rights). Our platforms are built in a decentralized methodology from the top-down.
This is also why we utilize offline segregation in cold storage for all funds preventing any future hacks to our systems. It is for this very reason that we can't offer instant withdrawals and we have withdrawal time slots once per day where all withdrawal requests are processed.
As we said before - security is our number one priority. Everything from servers, game applications, internal processes and many features like card shuffling are built with security in mind.
It is not possible for this intrusion to have occured internally. We have only ever had two cases whereby users claimed an account is compromised. You would be the second and the first user later discovered malware caused his leak.
