Spinly.io 🎰✨ - Next-gen Crypto iGaming Platform 🚀💸 Instant withdrawal

[Comeacross]

I can also say that discovering this loophole came too late after how long the casino is operational, nobody reported this as a critical loophole. It is kind of naivety to sacriface a part of your privacy in exchange for saving few seconds not going through some security verification. Let's hope this to be updated asap.

I think most people seem excited about the free and fast withdrawals and thereby overlook that aspect of security of funds. I raised the concern here to call the attention of the team to look into it because I have seen such features in other platforms. Majority of us leave our browser history and tabs open after activities.

This means everyone who can access your device can access your browser history. If your device gets into wrong hands, they can access your account and clear your funds. I don't know how long Spinly maintain login session but I'm sure it'll over 24hrs which means your account can remain logged in within that window. If you have other security layers activated, they can only access your account but can't move your funds.

It'll make a great upgrade if they integrate it as soon as possible.

[Perfectbaby]

If it is true, then this is a major security loophole. I have never encountered a casino or any other service where the user can't activate additional security layers for both login and withdrawal (plus changing the parameters). I find it strange like how a famous casino like Spinly isn't aware about this major loophole. I am not a Spinly user myself but I will keep an eye to this thread waiting for other users to confirm that this is true and that the user account parameters don't allow to activate additional security layers even though those layers can be activated upon signing in.

I logged in and confirmed, it is true. There is no extra layer of protection.

I think the casino didn't include it because not many people enforce 2FA in their casino accounts and mainly depend on protecting their login details, like passwords and email, which is the basic layer of protection when signing up.

Notwithstanding, I still think it should be there as an option, helpful for gamblers who keep funds sitting in their account.

This is just added advantage to those who do keep their funds on their account, and yes it is important in generally but it doesn't really matter since their confirmation is manually it would take time for someone to steal funds couples with if that person initiated a withdrawal with a new wallet it would take more time be confirmed unlike the regular address that quickly gets confirmed.

I don't see it as an added advantage like you described it. It is a basic layer of protection in general to ask the user to confirm everytime he log in from a new device or using a new ip, and for all withdrawal requests, and for all setting changes. If none of those protection methods is used then the account is at a high risk position and vulnerable to be used by anybody not exclusively to its owner.

I can also say that discovering this loophole came too late after how long the casino is operational, nobody reported this as a critical loophole. It is kind of naivety to sacriface a part of your privacy in exchange for saving few seconds not going through some security verification. Let's hope this to be updated asap.

As I know too well the Spinly team would do everything to make sure they satisfied their customers and users since users and gamblers has the right to request for additional layers of protection on their accounts. Of course we should also apply some safety measures, like to keep our logins details well tight without being exposed to any where were someone else apart from the original owner no else could have access to it.
Security is what matters as gamblers account is at the verge of being hacked so easily if something drastic are not done.

[Kavelj22]

If it is true, then this is a major security loophole. I have never encountered a casino or any other service where the user can't activate additional security layers for both login and withdrawal (plus changing the parameters). I find it strange like how a famous casino like Spinly isn't aware about this major loophole. I am not a Spinly user myself but I will keep an eye to this thread waiting for other users to confirm that this is true and that the user account parameters don't allow to activate additional security layers even though those layers can be activated upon signing in.

I logged in and confirmed, it is true. There is no extra layer of protection.

I think the casino didn't include it because not many people enforce 2FA in their casino accounts and mainly depend on protecting their login details, like passwords and email, which is the basic layer of protection when signing up.

Notwithstanding, I still think it should be there as an option, helpful for gamblers who keep funds sitting in their account.

This is just added advantage to those who do keep their funds on their account, and yes it is important in generally but it doesn't really matter since their confirmation is manually it would take time for someone to steal funds couples with if that person initiated a withdrawal with a new wallet it would take more time be confirmed unlike the regular address that quickly gets confirmed.

I don't see it as an added advantage like you described it. It is a basic layer of protection in general to ask the user to confirm everytime he log in from a new device or using a new ip, and for all withdrawal requests, and for all setting changes. If none of those protection methods is used then the account is at a high risk position and vulnerable to be used by anybody not exclusively to its owner.

I can also say that discovering this loophole came too late after how long the casino is operational, nobody reported this as a critical loophole. It is kind of naivety to sacriface a part of your privacy in exchange for saving few seconds not going through some security verification. Let's hope this to be updated asap.

As I know too well the Spinly team would do everything to make sure they satisfied their customers and users since users and gamblers has the right to request for additional layers of protection on their accounts. Of course we should also apply some safety measures, like to keep our logins details well tight without being exposed to any where were someone else apart from the original owner no else could have access to it.
Security is what matters as gamblers account is at the verge of being hacked so easily if something drastic are not done.

Already few days we discuss this point as a major loophole and the official representative is active publishing promotions but he didn't say a word about this or post about planned future updates. I am not blaming him about not interacting but I would blame users who will keep using Spinly if no changes are being made to fix the critical points.

I remember reading that Spinly has a Discord server. If anybody can paste the invite link to that server, I will try to post about it within extended communities of Spinly. This is for the good of the community and I have no intention the casino reputation in any way.