Security scope
The package is a static website containing HTML, CSS, JavaScript and local image assets. It does not include an account database, payment backend or gambling wallet.
Report a vulnerability
Send a concise report to [email protected]. Include the affected URL, reproduction steps, expected impact and a safe proof of concept. Configure this mailbox before launch.
Responsible testing rules
- Do not access data that does not belong to you.
- Do not perform denial-of-service testing.
- Do not send spam or social-engineering messages.
- Do not test third-party operator systems through this policy.
- Allow reasonable time for remediation before public disclosure.
Visitor safety
Never enter an operator password on a page hosted by this domain. Commercial actions should lead through /go/ to the configured destination. Check the destination hostname and TLS certificate before entering sensitive information.