Hey Fam,
Following a scam similar last year with shuffle and noahdummett, I began working with a new outfit, Gamba.com. A few months in, as a top affiliate of theirs, I started noticing people who were being shorted when they won. I brushed it off initially, but the theme kept coming up over and over, eventually snatching up 2 close friends of mine.
I had an agreement in writing with gamba - a Non-Disclosure - which I honored. However, once a close friend of mine was shorted for a mental max win, I had to get involved with the dispute. In the end, Gamba settled with that person "in good faith" tho, the accusation that the person lived in a blocked geo was anything but "good faith" given that I have a working relationship with them, then how could this be "good faith".
After this they treated me differently. Ultimately they blamed me for standing up for this person, even though it was my reputation they were damaging and I take pride in having 0 complaints and 30,000 paying users in my own business which they attempted to exploit and did in the tune of several hundred thousand dollars.
Earlier this week I was conducting security research on gamba domains, and found one "inhouse.gamba.com". So I navigated to it, and wasnt able to sign in using my existing credentials. So I tried to register, and sure enough it allowed me to using my own personal gmail account. That's when my jaw hit the floor because what I witnessed was strong evidence this organization was using dummy accounts to fool everyone and also to prevent users from legitmately competing for their prizes.
In line with our NDA, I came to their live chat and offered to disclose this if they agreed to pay a market competitive disclosure rate, and they agreed. So I sent the disclosure outlining my find, and Dan paid me a whole $8. The market rate for an 8.2 CVSS score is between $1500 - $5000 and I explained this to him, after he pretended to go afk and killing the dialogue. But importantly, they immediately patched this within 3 minutes of disclosure. In the end, I figured out the scam - they will of course just pretend afk any time they are caught in the cross hairs, and even do when players can comply with KYC and try cashing out. If they can pass, they will still reject the withdraw in hopes the user gambles and loses the winning balance before replying.
Since he continues to go AFK and pretend like I am stupid, I am forced to post my findings here, which I saved the Chrome Developer .HAR file for all to see, including my NDA with them. But even more shocking is the fact that there are leaders from Degods, y00ts and others here, which strongly suggest their involved. Being that - Kraken sponsored DeBasel not too long ago, dragging their leaderships into the mix as well. Now I also live within spitting distance of these players, in addition to coinbase, who is the exchange they frequently use to offload their haul based on my tracing of blockchain from their wallets.
I want to caution everybody to not have any business with this company or any related companies, and I will update this thread as more unfolds, tomorrow I am heading to Kraken's corporate office to hopefully have a chat with their legal department, and failing that I have no choice left than to open a case with the Secret Service, and civil courts. Some of the information I found on inhouse.gamba.com reveals their true identities and for this reason, I was hoping they would squash this dispute with me by thanking me for the disclosure and being a dead issue. I have saved all of the evidence and I will add more as I find it to a google drive, and you can find more on
https://GambaDanScam.comImportant to note: I also sent takedown notices to their web host and registrar a few months back after they fucked me by removing all of my affiliates even though I had paid the promotional aspects of our partnership, and since they are not only enabling this illegal sham to go on, I feel it necessary to likewise also include them in my reports and lawsuits, also attached.
This was the reply from GoDaddy:
"Hello,
Thank you for bringing your concerns to our attention. While GoDaddy does not permit illegal content on our customers' websites, we are not in a position to determine whether the site in question is engaged in illegal activities.
We encourage you to contact your local law enforcement agency if you suspect any unlawful use of a website. We will cooperate with law enforcement in their investigation by complying with lawful requests.
We appreciate your understanding and cooperation.
Regards,
Content Safety Unit
Trust & Safety Team"
https://drive.google.com/drive/folders/1GoNqtBSGuZPbYseRxNI0IUNzpRtknBvh?usp=sharingHere are the financials between my affiliates on gamba:
https://crypto-analytics-platform.vercel.app/tips_viewer.html
