Scope and reporting status
What is in scope
The implementation consists of static HTML, CSS, local illustrations and machine-readable files. It has no player authentication, payment processing, document upload or account database. A separate gambling operator’s systems are outside this site’s scope. A suspected operator-account issue should go to that verified provider.
A reporting channel is not activated
A monitored security contact has not been supplied. The repository includes a clearly marked security.txt draft rather than publishing a fictitious address or claiming a staffed vulnerability program. Before public launch, add a genuine contact, validate the file and publish it at the standard well-known location.
Handle reports carefully
Minimum useful information
A report should describe the affected URL, observed behavior and a minimal safe reproduction. Do not send player credentials, OTPs, identity documents, unrelated personal data or secrets. Do not disrupt service or access information belonging to other people to demonstrate a problem.
No promised program or reward
This page does not create a bounty, response-time guarantee or legal safe-harbor agreement. The production owner must define any such program and its actual contact route explicitly. Keep current site-owner details and deployment configuration consistent with the published policy.