I don’t think this has anything to do with the casino. If some scammer send an email from bitzmaiI.io, the user is responsible to check the authenticity of the sender. Bitz.io cannot do anything about it. Do we held amazon responsible just because some scammer created a phishing site like “amaz0n.com” and scammed people? No we don’t do that.
I am not holding Bitz responsible if a scammer used an identical phising mail to scam people. I'm only saying, since they have various personal managers and they can use different emails that end with bitzmail.io, then they can publish those emails so players know that any email coming from a different email is to be treated like a scam. Amazon has official emails; they can't message you from another email, so it's easier to verify.
To be honest, I don’t think it’s that easy for a hacker to create an email address that ends with @bitzmail.io (which is supposed to be the official domain) unless they have access to the company’s servers or email servers. And if he has done that, then he could do far more than just create an email address using the legitimate domain.
I did not use "bitzmail.io", I talked about "bitzmaiI.io". It is not difficult for scammers to create spoofed domains. They can do it in a way that it looks very identical to the official one, and if you don't look very well, you might not spot the difference.