List of UK online casinos that are not secure by default

By Stephen Kellett
15 December, 2017

This is one of several posts of the topic of security of websites. Inspired by my initial post on the security of UK banks.

The reason for splitting this data into multiple posts is to make it more manageable. So that data on one institution is not mixed with data on another type of institution.

The following key is used for the secure status:

YesThe site is secure, loaded via https
InvalidThe site loads via https, but the security certificate is invalid and thus the site is
insecure.
PartialThe site loads via https, but loads some parts of the page without https. The site is
insecure.
NoThe site is loaded via http, not via https.
FixedThe site is loaded via https, but at the time of first writing it was loaded via
http.
??We could not find a website to evaluate.

We tested 75 online casinos. We found 12 online casinos that did not have a secure home page (not https or did have https with an invalid security certificate). That is 16% of UK online casinos have security vulnerabilities.

CasinoSecureHome Page
21JackpotsNohttp://21jackpots.com/
32Red CasinoYeshttps://www.32red.com/
50 Stars CasinoNohttp://www.50starscasino.com/english/eur/download.html
888CasinoYeshttps://www.888casino.com/
All British CasinoYeshttps://www.allbritishcasino.com/
All Irish CasinoYeshttps://www.allirishcasino.com/
BETAT CasinoYeshttps://betat.co.uk/home/
Betfred CasinoNohttp://www.betfred.com/casino
Betsafe CasinoYeshttps://www.betsafe.com/en/casino
Betspin CasinoYeshttps://www.betspin.com/gb
Betway CasinoYeshttps://casino.betway.com/lobby/en/#/home
Bet-At-Home CasinoYeshttps://uk.bet-at-home.com/
bgo VegasYeshttps://www.bgo.com/
Cashmio CasinoYeshttps://www.cashmio.com/en
CasinoLuckYeshttps://www.casinoluck.com/
Casino KingsYeshttps://www.casinokings.com/
Casino MagixYeshttps://www.casinomagix.com/
Casumo CasinoYeshttps://www.casumo.com/en-gb/
ComeOn CasinoYeshttps://www.comeon.com/
Carnival CasinoNohttp://www.carnivalcasino.com/
Casino CruiseYeshttps://www.casinocruise.com/en-gb
Casino KingYeshttps://www.casinokings.com/
Casino PlexNohttp://casinoplex.co.uk/
Casino ShareNohttp://www.luxurycasino.co.uk/en-gb/
Casino SplendidoYeshttps://www.casinosplendido.com/
Casino.comYeshttps://www.casino.com/uk/
Challenge CasinoNohttp://www.luxurycasino.co.uk/en-gb/
Conquer CasinoYeshttps://www.conquercasino.com/
Cyber Club CasinoYeshttps://www.cyberclubcasino.com/
Dash CasinoYeshttps://www.dashcasino.com/
Dr Vegas CasinoYeshttps://www.drvegas.com/
Dream Palace CasinoYeshttps://www.dreampalacecasino.com/
EnergyCasinoYeshttps://energycasino.com/en/
FruityCasa CasinoYeshttps://www.fruitycasa.com/
Gala CasinoYeshttps://www.galacasino.com/
GameVillageYeshttps://www.gamevillage.com/
Golden Lounge CasinoNohttp://www.goldenlounge.com/
Grosvenor CasinoYeshttps://www.grosvenorcasinos.com/
Guts CasinoYeshttps://www.guts.com/gb/page/welcome
IntercasinoYeshttps://www.intercasino.co.uk/
Jackpot Luck CasinoYeshttps://www.jackpotluck.com/
Jetbull CasinoYeshttps://www.jetbull.com/
Karamba CasinoYeshttps://www.karamba.com/
Ladbrokes CasinoNohttp://casino.ladbrokes.com/en
Magic Box CasinoNohttp://www.magicboxcasino.com/
Mansion CasinoYeshttps://play.mansioncasino.com/
Maria CasinoYeshttps://www.mariacasino.co.uk/
mFortune CasinoYeshttps://www.mfortune.co.uk/
MobileWins CasinoYeshttps://www.mobilewins.co.uk/
Monte Carlo CasinoNohttp://www.casinomontecarlo.com/
Moon Games CasinoYeshttps://www.moongames.com/
Mr Green CasinoYeshttps://www.mrgreen.com/en
Nedplay CasinoYeshttps://www.nedplay.com/
Noxwin CasinoYeshttps://www.noxwin.com/#/
Oddsring CasinoYeshttps://www.oddsring.com/home
Paddy Power CasinoNohttp://casino.paddypower.com/
PokerStars CasinoYeshttps://www.pokerstarscasino.uk/
Power SlotsYeshttps://www.powerslots.eu/
Prospect Hall CasinoYeshttps://prospecthallcasino.com/games/index/
Spinit CasinoYeshttps://www.spinit.com/en
Redbet CasinoYeshttps://www.redbet.com/en/casino
Red Queen CasinoYeshttps://www.redqueencasino.com/
Rizk CasinoYeshttps://rizk.com/gb
Roxy Palace CasinoYeshttps://www.roxypalace.com/
Royal Swipe CasinoYeshttps://www.royalswipe.com/
SCasinoYeshttps://www.scasino.com/uk/
Sportingbet CasinoYeshttps://casino.sportingbet.com/en/casino
ShadowBet CasinoYeshttps://www.shadowbet.com/uk
Slotty Vegas CasinoYeshttps://slottyvegas.com/en/welcome/
Sporting Index CasinoYeshttps://casino.sportingindex.com/
Trada CasinoYeshttps://www.tradacasino.com/
Unibet CasinoYeshttps://www.unibet.co.uk/casino#filter:uk-unibet-picks-casino-slots-7-420439
Vegas Paradise CasinoYeshttps://www.vegasparadise.com/
VideoSlots CasinoYeshttps://www.videoslots.com/
William Hill CasinoYeshttps://casino.williamhill.com/#!/

Commentary

Reputation

Just as with wealth management, there are some big names in this list, that spend lots of money on advertising, and yet they are not secure. You cannot rely on a trusted brand name to mean that you get a secure website.

Downloading from a non secure site

One site in particular deserves a special mention. 50 Stars Casino. This is not secure, but for you to gamble with them you need to download a software package from their non-secure website and then install the software. I did download it. The download is digitally signed, but given that it’s downloading off a non-secure page, the download could, technically be anything, not necessarily the software the casino wants you to download. This is not good. Not only is the website not secure, but it could potentially attack your computer if the download is compromised.

Disclaimer

I shouldn’t need to point this out, but i will, all the same, just to be clear.

The data provided on this page should taken at face value. If you’re not sure about something, please verify it yourself. Nothing reported here should be regarded as a criticism or an endorsement or recommendation of an organisations security effectiveness. I am simply passing comment on whether the home page (whatever that may be) is provided as https on not. Other security concerns are a separate matter.

If your organisation is listed here and is not marked as secure, your best course of action is to fix that, not to complain that someone is reporting a fact anyone with a web browser can discover. The security status of your home page is public information, albeit information that many people don’t understand.

Fully functional, free for 30 days