Casino email and account safety

Suspicious messages

Be cautious of emails or texts that promise unusual winnings, urge you to act immediately or ask for passwords or documents through a link. Go to the operator’s website directly instead of following the link.

Protect your account

Identify the legal business and exact domain. Verify any claimed licence with its issuing authority and check the activities covered. An overseas licence does not establish permission to operate or promote gambling in Malaysia.

Marketing you did not want

You can change marketing preferences in your account or unsubscribe. If you have self-excluded and still receive gambling marketing, report it to the operator and keep a record.

How scams usually look

Scam messages often claim your account is locked, a large win is waiting, or a bonus expires within minutes. They may use a familiar brand name and logo but link to an address that differs slightly from the real site. Some ask you to “verify” payment details or send documents by reply.

Genuine licensed operators will not ask for your password, full card number or one-time security codes by email, text or social media.

Checking a message is genuine

Do not tap links in unexpected messages. Instead, open the operator’s website or official app yourself and check your account messages there. Look at the sender’s full address, not just the display name, and be wary of personal email services or unusual domains.

If a message looks suspicious, do not follow its links. Contact the operator through its own website and your bank if payment information may be affected.

Securing your account

Use a unique password for each gambling account and a password manager to store them. Turn on two-factor authentication where available. Review your account’s login history and payment methods from time to time, and change your password straight away if anything looks unfamiliar.

If you think someone else has accessed your account, contact the operator immediately and ask them to lock it, then contact your bank if payment details may be affected.

Controlling marketing

You can choose which marketing you receive. Look for marketing preferences in your account settings, use the unsubscribe link in genuine emails, and reply STOP to marketing texts where that option is given. If you self-exclude, turn off marketing and ask the operator to stop promotional contact.

Check the operator’s current terms and applicable requirements before acting. General guidance is not a guarantee, legal advice or evidence of local authorisation.

Common questions

How do I know an email is really from my casino? Check the sender’s full address, avoid clicking links, and log in directly through the official site or app to see if the same message appears in your account.

What should I do if I clicked a suspicious link? Change your password straight away, enable two-factor authentication, check your account and payment methods, and contact the operator and your bank if anything looks wrong.

Why am I still getting emails after unsubscribing? Operators should stop marketing promptly. Account and security messages may still be sent. If marketing continues, raise it with the operator and keep a record.

Further wellbeing guidance