Casino Cash Palace Review
Casino Cash Palace is an online casino established in 2015 with games supplied by Endorphina, Genesis Gaming, Microgaming, Pragmatic Play, and Rabcat. It is operated by Katan Kapital Entertainment N.V.. Last updated: September 2, 2016.
Review of Casino Cash Palace
Casino Cash Palace is a browser based casino run by a Curacao shelf company known as Katan Kapital Entertainment. It came to our attention due to a report in our forum from a player complaining of being given the run around for months when trying to withdraw a small amount from this casino. I decided to look deeper into this casino and what I found truly angered me.
Blacklisted: unlicensed, no security, doesn't pay winners
During my time looking at this casino in detail I ran into a number of major problems. The first is that the casino's claims of holding a license to operate from the government of Curacao are flat out false. Secondly the site's security is not up to scratch as it does not use SSL encryption at all. This puts your personal information, logins, and passwords at risk of interception. And lastly of course is the fact that we have been unable to verify that they have ever paid a single customer who has withdrawn.
Threats made against players that complain of slow payment
Not only does this casino apparently take months to pay winners, assuming they pay at all, but they do not take kindly to people posting public complaints about their unprofessional business practices. Take a look at this email received by a player that has been waiting months for a payout. It was posted to the player via an encrypted, anonymising email service called ProtonMail. We have censored the many expletives.
I write you by this method because I work in the shadows, you have been threatening a Casino, they are fixing some issues in order to pay you.
I want to be very clear with you f***ing berk, you have two choices, one it's to wait peaceful to get paid without doing your stupid things or the second and the most stupid (as you are) is threatening them and write everywhere your bull***t, if you choose this way, we are in WAR, we have your address, and everything about you f***ing piece of s***.
The choice it´s yours, thing twice, after the next stupid action from your side, no way back from our side. We are not afraid to anything f***ing red neck & motherf***er.
I´ll be watching you very close!
Charming and oh so professional.
False licensing claims
Casino Cash Palace claims to be "licensed and authorized by the Government of Curacao". It may have been true at some stage in the past but at the current point in time the claim is false. A simple check of its licensing certificate shows that it is in fact revoked. This is an extraordinary finding because after years of experience in dealing with problems between players and casinos licensed in Curacao it is clear to me that the regulator there does not care what casinos get up to so long as they pay the licensing fee. I can only conclude that they have either done something so bad that the notoriously uncaring regulator has cut off their license or they have stopped paying their licensing fee. Neither is a particularly comforting thought.
AntillePhone Licence Verification
Trading Name: Katan Kapital Entertainment N.V. (license 8048/2014-013)
Address: Curacao, CW
Email: info at gaminglicences.com
Website: casinocashpalace dot com; aztecfortune dot com
E-GAMING LICENCE STATUS: REVOKED
No encryption and potential security flaws
During my testing of this casino I noticed a seal graphic in the bottom left corner of the page that claimed that the site was protected by a GlobeSSL Extended Validation certificate. I thought that was strange seeing as the page was not SSL encrypted. A quick mouseover on the seal pops up a warning message saying that the site is not in fact protected, and clicking on it pops up a window with a warning to that effect. Sure enough, logging the network requests made during login and registration show that your personal information, login, and password, are all sent in plain text across the web where it could be intercepted by anyone with a server in between.
Looking at the requests also revealed that the casino website is run on an outdated version of Wordpress. Putting aside the debate about the risk of running a casino on a Wordpress website, a piece of software which is notorious for its exploitable security vulnerabilities, the fact that the installation that the casino is running on is several versions out of date is verging on criminal negligence.
I am left feeling angry after my investigations into this casino. I can't decide whether this is an amateur operation being run by people who do not know what they are doing, or simply an elaborate scam designed to fleece anyone who is foolish enough to deposit their money. In the end that does not really matter. The most important thing is to warn people not to get sucked into the trap that is Casino Cash Palace.