No assumptions, let's verify.
The Real Revenue. Real Numbers block is not live data. Inline JS builds numbers from fixed bases (ggr base 284000, players 47293, tx 18422), daily increments, Math.random jitter, and localStorage (igx_live_*). Their own code comments says: counters that grow across days and persist across reloads.
/api/casino/live-wins returned tiny repetitive wins for one player's name. The static marquee still shows whale-style amounts (whale_01, +$31k, etc.).
Their product files are already exposed without authorization. You can access them here - /storage/releases/ is publicly available.
The files are available here -
https://igaxming.com/storage/releases/casino-package-v2.6.0.zip (27MB)
installer-1.0.0.zip
So, I don't understand why people would pay them thousands to download these packs from their website.

Now everything is clear. This is a fake business for stealing people’s money. How can a company claim to make millions in revenue, but then it turns out that its statistics are just a fake counter?
Even worse is that they are apparently incapable of protecting their own files and servers. As you explained, they left their entire source-code packages were left public and available for anyone to download with just one click.
How can a company that claims it can build a casino operating to high security standards be unable to protect its own private folders?
This is clearly not a real company, but rather a scam operation.
Stay away from them.