Computer Crimes, Hacking Is it Illegal to have used a failure in an online system for my own advantage? Fully explained

Status
Not open for further replies.
N

Newbie123

New Member
Jurisdiction
Other
Before start: I was not sure in what category to ask this question so I'm sorry if this is the wrong one, I'm new to the forum.

Let me explain what happened:

  • I used to play in a Casino that rewards players with coins which you can spend for buying free spins

  • Those free spins turns winnings into bonus money that has to be wagered 40 times before withdrawn

  • The withdrawal request is then verified manually by an operator and approved or declined
Some time ago I found that the site is bad coded and You can do something to buy spins multiple times using the same amount of coins. Then I've reached to them telling they have a problem in their code that could make them lose money. As i love to play online slots, I asked them for a little reward for telling them the problem, they refused. So I just tried it for fun, and bought a bunch of free spins with coins enough to buy only a few. Then I used those free spins to play and wagered the amount required, requested a withdrawal, they've checked it and approved the payment. At first I thought they would decline my request but they didn't. Now I got the money and I'm worried that they can sue me or press charges for that. The problem is not happening in the slot games but in their website. I'm thinking about telling them and willing to give back the money, but in either way I need to know if that can cause me legal problems. What can I be charged for with this, I mean, what did I do? Is it some kind of fraud? Does that make me a criminal? I'm really worried.

My jurisdiction: Brazil
Casino's jurisdiction: Malta
 
Newbie123 said:
Before start: I was not sure in what category to ask this question so I'm sorry if this is the wrong one, I'm new to the forum.

Let me explain what happened:

  • I used to play in a Casino that rewards players with coins which you can spend for buying free spins

  • Those free spins turns winnings into bonus money that has to be wagered 40 times before withdrawn

  • The withdrawal request is then verified manually by an operator and approved or declined
Some time ago I found that the site is bad coded and You can do something to buy spins multiple times using the same amount of coins. Then I've reached to them telling they have a problem in their code that could make them lose money. As i love to play online slots, I asked them for a little reward for telling them the problem, they refused. So I just tried it for fun, and bought a bunch of free spins with coins enough to buy only a few. Then I used those free spins to play and wagered the amount required, requested a withdrawal, they've checked it and approved the payment. At first I thought they would decline my request but they didn't. Now I got the money and I'm worried that they can sue me or press charges for that. The problem is not happening in the slot games but in their website. I'm thinking about telling them and willing to give back the money, but in either way I need to know if that can cause me legal problems. What can I be charged for with this, I mean, what did I do? Is it some kind of fraud? Does that make me a criminal? I'm really worried.

My jurisdiction: Brazil
Casino's jurisdiction: Malta
Click to expand...
I'm sorry...This site if for United States Law only.
 
I would say probably not.... So long as you are not "hacking" the system. If it truly is faulty coding and you have even reported it, I suspect it would be difficult to sustain allegations of cheating or fraud. You describe actions that any player could do within the rules that are apparently allowed.

If you believe this is a flaw that could lead to significant losses if not corrected and you want a reward you might visit an attorney and see if a letter can be drafted on your behalf. Without disclosing the exact issue see if they will agree to pay you for information that exposes a significant flaw. A letter is more likely to be seen by the people who actually make decisions, and their response in writing, if they agree, is how you get paid.
Your attorney will also help to ensure you have not done anything illegal.
 
Has the forum expanded to include Brazilian and Maltese law?
 
If it had been the US, I could guarantee that even if it wasn't illegal, the casino likely would insist on not paying out.
 
mightymoose said:
I would say probably not.... So long as you are not "hacking" the system. If it truly is faulty coding and you have even reported it, I suspect it would be difficult to sustain allegations of cheating or fraud. You describe actions that any player could do within the rules that are apparently allowed.

If you believe this is a flaw that could lead to significant losses if not corrected and you want a reward you might visit an attorney and see if a letter can be drafted on your behalf. Without disclosing the exact issue see if they will agree to pay you for information that exposes a significant flaw. A letter is more likely to be seen by the people who actually make decisions, and their response in writing, if they agree, is how you get paid.
Your attorney will also help to ensure you have not done anything illegal.
Click to expand...
Anyone with basic http request knowledge could manage to do that. It's basically a flaw that won't happen in most of small websites, but this one is from a big company that has a lot of big casinos. They probably hired a cheap programmer who hasn't done his homework at coding school.
In my e-mail I told them it is a significant security flaw and could cause significant loss of money. They replied saying that they don't pay for information like that but "if I wanted to tell them for free to improve my gaming experience I was welcome to".
I don't intend to keep the money but they have verified the request and approved the withdrawal.
What area of lawyer expertise I should look for?
I don't want the police to knock down my door and arrest me in front of my family, but also they don't seem to have a clue that this is happening even after I told them they have a flaw like that.
In general, if You find a flaw like that on a website and then use it, can it be considered a crime?
 
Newbie123 said:
Anyone with basic http request knowledge could manage to do that. It's basically a flaw that won't happen in most of small websites, but this one is from a big company that has a lot of big casinos. They probably hired a cheap programmer who hasn't done his homework at coding school.
In my e-mail I told them it is a significant security flaw and could cause significant loss of money. They replied saying that they don't pay for information like that but "if I wanted to tell them for free to improve my gaming experience I was welcome to".
I don't intend to keep the money but they have verified the request and approved the withdrawal.
What area of lawyer expertise I should look for?
I don't want the police to knock down my door and arrest me in front of my family, but also they don't seem to have a clue that this is happening even after I told them they have a flaw like that.
In general, if You find a flaw like that on a website and then use it, can it be considered a crime?
Click to expand...
There is not one person on this site that has knowledge of Maltese/Brazilian Law. You would be terribly foolish to be guided by any advice you receive with the exception of "Consult with an attorney in Malta".
 
justblue said:
There is not one person on this site that has knowledge of Maltese/Brazilian Law. You would be terribly foolish to be guided by any advice you receive with the exception of "Consult with an attorney in Malta".
Click to expand...
So, attorneys from my country wouldn't be able to help me in the matter?
 
Newbie123 said:
In general, if You find a flaw like that on a website and then use it, can it be considered a crime?
Click to expand...

In general, no, not unless you are altering the code or doing something to make it function other than intended. If you are using it the way it was designed it is hardly criminal, as all users would then be committing crimes. It should be pretty clear to you which side of the exploitation fence you are on.

Newbie123 said:
So, attorneys from my country wouldn't be able to help me in the matter?
Click to expand...

They likely can. I believe I did suggest that above. While I do think it is unlikely a casino would pay you for your info you could still try, especially if you are reasonably assured you have not committed a crime.

Newbie123 said:
You're right. I'm sorry for disturbing You guys. Appreciate the time.
Click to expand...

Not disturbing. Some just complain more than others and choose to be unhelpful. I am sure you already knew the best information would come from a personal attorney and not strangers on the web.
 
mightymoose said:
In general, no, not unless you are altering the code or doing something to make it function other than intended. If you are using it the way it was designed it is hardly criminal, as all users would then be committing crimes. It should be pretty clear to you which side of the exploitation fence you are on.



They likely can. I believe I did suggest that above. While I do think it is unlikely a casino would pay you for your info you could still try, especially if you are reasonably assured you have not committed a crime.



Not disturbing. Some just complain more than others and choose to be unhelpful. I am sure you already knew the best information would come from a personal attorney and not strangers on the web.
Click to expand...

I fail to see how one is being "helpful" when one offers up a guess and calls it fact...which is what you did mightymoose. Unless you have been taking night courses in Malta/Brazil Law? No? Didn't think so.
 
mightymoose said:
Did i call something a fact here? I believe I used the word "probably" and "generally".

Quit whining.
Click to expand...
Are you familiar enough with Maltese or Brazilian law to even state what might be generally true?
 
mightymoose said:
Did i call something a fact here? I believe I used the word "probably" and "generally".

Quit whining.
Click to expand...
How do you know? "Probably" and "generally" bullshit qualifiers when you are advising someone in another country that has totally different laws from us. I highly doubt that either Brazil or Malta have a legal system based on English Common Law.
 
So you are backing away from your assertion I was stating facts?

I don't think i gave any advice... Except maybe to seek counsel of a local attorney. That is good advice regardless of country.

It seems to me you argue only because I said it.

Also, watch your language. It's inappropriate and unnecessary.
 
Status
Not open for further replies.

Share this page

Get a free case review from a lawyer
Back
Top