I always thought that when I sign up a player to any casino, then there will be a record in the database in the background in that player’s record that the referer was me. When the first sign up happens, this linkage is made, and if the program doesn’t allow re-sign ups (like in the case of many rakeback poker sites) then this linkage is for lifetime.
I saw the Top Game reports show checking for duplicates in the case of each player, and they passed that duplication test. How could it be that they thought the second deposits are the results of House’s great marketing activity?
When a player makes a second/third/etc deposit, they cannot do that through the website, but only through the casino software where he/she can be totally authorized and identified, regardless he visited the website again or not.
I want to think that these problems are not intentional, but being an application designer and developer myself I can only say that they should fire their testing team very fast, or oh well… something stinks.
For me this issue made complete trust lose in Top Game, even if they correct the problems, I don’t want to watch my back all the time and find out that my hard work could just vanish. Not one US facing program worth this in my eyes. I hope they will correct the issues and others can promote them if they want. 
/And this is the time when I’m dreaming about regulation, etc, where these kind of issues just cannot happen because of strict monitoring and controlling.. lol/
Anyway, I cannot say my thanks enough to Prof, Gamtrak and the others who made this audit, well done and thank you for your work!