Quick answer
Use a verified official link, check the exact hostname and HTTPS connection, create a unique password, enable available security controls, and use only cashier details shown inside the signed-in account. Never share a password, one-time code, recovery phrase or private key with support.
1. Verify the website
- Type or bookmark the official domain instead of relying on an unsolicited message.
- Check spelling, subdomain and top-level domain before signing in.
- Confirm HTTPS, but remember that HTTPS alone does not prove brand ownership.
- Use the official-sites guide to compare current brand links.
- Leave pages that request browser security bypasses or unusual downloads.
2. Secure the account
Use a long password that is not reused on email, banking or social accounts. Enable multi-factor authentication when available. Protect the email account linked to the gaming profile because it may control password recovery. Review login history or device lists after unexpected alerts, and contact official support directly rather than replying to the alert message.
3. Check deposits and withdrawals
Open the cashier from the current account session. Verify recipient, amount, currency or token, network, limits and fees. Names may need to match across the player account and payment method. For crypto, an identical token symbol can exist on several incompatible networks. Save the transaction reference and wait for status confirmation before repeating a payment.
A legitimate verification process may request identity documents through an official secure channel, but it should not require a wallet recovery phrase, email password, remote-control access or payment to “release” a withdrawal. Verify unusual requests through a second official channel.
4. Read bonus conditions
Review eligibility, qualifying deposit, wagering base and multiplier, game contribution, maximum bet, expiry, restricted games and maximum cashout. Save the terms shown at opt-in. A high percentage can have a larger turnover commitment or lower withdrawal cap, so compare the complete conditions.
5. Check the game information
Before staking, open the rules and paytable. Confirm objective, payout, stake limits, RTP or return information where supplied, feature rules and game-history access. Previous outcomes do not predict the next round. Stop if the interface freezes or the recorded result is unclear, then check history before placing another stake.
6. Set responsible-play controls
Create a money limit and time limit before the session. Use deposit limits, reminders, cooling-off or self-exclusion tools when needed. Gambling should be entertainment, not income or debt recovery. Warning signs include hiding activity, borrowing to play, repeatedly breaking limits and continuing mainly to recover losses.
Red flags that need a pause
- A message creates urgency or threatens account closure unless money is sent.
- A recipient changes without an in-account notice.
- Someone asks for an OTP, password, recovery phrase or private key.
- A “guaranteed win” system asks for payment or remote device access.
- A withdrawal requires a new personal transfer to an unverified recipient.
- The domain is misspelled or appears only in an advertisement or direct message.
Frequently asked questions
Is HTTPS enough to prove a site is official?
No. It encrypts the connection but a misleading domain can also use HTTPS.
What should support never need?
Your password, one-time code, email credentials, wallet recovery phrase or private key.
What should I do after a suspicious request?
Stop, take a non-sensitive record of the request, open the official site independently and contact official support.