TOKWIRO ISSUES STATEMENT ON ULTIMATE BET FRAUDULENT PLAYER
Cheating confirmed due to software vulnerability; disadvantaged players to be refunded After months of silence and amid a growing uproar in the online poker player community over alleged cheating by player NioNio (see earlier InfoPowa reports), the owners of Ultimate Bet.com, Tokwiro Enterprises ENRG, issued a statement this week. The statement presumably marks the end of what Tokwiro describes as a "lengthy investigation" in which it has been joined by independent auditors Gaming Associates and the licensing and regulatory jurisdiction Kahnawake Gaming Commission ("KGC"), in conducting a "…thorough investigation that included a comprehensive review of hand histories and game data, thorough analyses of software and network security, and audits of its security practices and procedures." The investigation concluded that certain player accounts did in fact have an unfair advantage, and that these accounts targeted the highest limit games on the site, Tokwiro reports. The statement does not identify the individuals responsible, but claims that these persons were found to have worked for the previous ownership of UltimateBet prior to the sale of the business to Tokwiro in October 2006. Tokwiro is taking full responsibility and will immediately begin refunding UltimateBet customers for any losses that were incurred as a result of unfair play. According to the Tokwiro-UltimateBet statement, the fraudulent activity was enabled by "unauthorised software code" that allowed the unidentified perpetrators to obtain hole card information during live play. The statement claims that the existence of this vulnerability was unknown to Tokwiro until February 2008 and existed prior to UltimateBet's acquisition by Tokwiro in October 2006. "Our investigation has confirmed that the code was part of a legacy auditing system that was manipulated by the perpetrators," the statement continues. "Gaming Associates, independent auditors hired by the KGC, have confirmed that the software code that provided the unfair advantage has been permanently removed." This comment raises some interesting questions of coincidence, bearing in mind that UltimateBet's sister site, Absolute Poker in the same Tokwiro ownership group, was involved in similar cheating allegations last year that subsequently led to it being fined $500 000 by the KGC. In that case, too the initial discovery of wrongdoing can be largely attributed to expert poker detectives on the community website 2+2, and the perpetrators were neither named nor (apparently) prosecuted. It also leaves unanswered the question of how NioNio was able to consistently beat the highest games on the UB site with win rates an order of magnitude greater than the best players on the planet, apparently without being flagged by security or the accounts section that handled his or her substantial winnings. But back to the Tokwiro statement, which claims that throughout the investigation it's priorities have been: * To permanently remove the ability to engage in unfair play; * To complete its investigation and come to a full understanding of what occurred; * To refund the affected customers; and * To implement measures that prevent future incidents. "We would like to thank our customers for their patience, loyalty and support, as well as for their understanding that we are doing everything we can to correct this situation," the statement asserts. "The staff and management of UltimateBet are fully committed to providing a safe and secure environment for our players, and we want to assure customers of our unwavering resolve to monitor site security with every resource at our disposal." The statement goes on to provide the following chronological order of events pertaining to the incident: January 2008: UltimateBet is alerted to suspicions of unfair play on the part of the account "NioNio" (prersumably by the 2+2 detectives who had already uncovered wrongdoing at Absolute Poker.) Within 24 hours, UltimateBet contacts the KGC to provide formal notice that UltimateBet has initiated an investigation of the incident. UltimateBe
t subsequently forwarded a copy of all related data to the KGC. The "NioNio" account and related accounts are suspended pending further investigation.
February 2008: Preliminary findings indicate abnormally high winning statistics for the suspect accounts. After discussions with the KGC, UltimateBet engages third-party gaming experts to assist with the analysis.
February 2008: Investigators confirm that the suspect accounts are associated with (unidentified) individuals who had worked for UltimateBet under the previous ownership.
February 2008: UltimateBet discovers the unauthorised code that allowed the perpetrators to obtain hole card information during live play. The code was part of a legacy auditing system that was manipulated by the (unidentified) perpetrators of the fraud. UltimateBet immediately removes the unauthorised code and works with the KGC and with third-party auditors to verify that the security hole has been eliminated.
March 2008: Six player accounts are confirmed to have participated in this scheme. No accounts were deleted at any point, although some account names were changed multiple times. The following account names are known to have been used in the fraudulent activity: NioNio, Sleepless, NoPaddles, nvtease, flatbroke33, ilike2win, UtakeIt2, FlipFlop2, erick456, WhackMe44, RockStarLA, stoned2nite, monizzle, FireNTexas, HeadKase01, LetsPatttty, NYMobser, and WhoWhereWhen.
May 2008: The investigation confirms that the fraudulent activity took place from March 7, 2006 to December 3, 2007.
May 2008: Gaming Associates certifies that the software code that enabled unfair play was removed from UltimateBet servers in February of 2008.
May 2008: Customers affected by this incident are identified, and plans for corrective action are reviewed with the KGC. Corrective Actions Taken The following actions have been taken or are currently underway as a direct result of this investigation. * The security hole identified in UltimateBet's investigation has been permanently eliminated. * UltimateBet is establishing a state-of-the-art software Security Center that consolidates and greatly enhances existing security capabilities. The first release of the new Security Center focuses solely on the immediate detection of abnormal winnings. Gaming mathematicians, poker professionals, and security software developers have all contributed to the specifications for the new Security Center. * UltimateBet customers are no longer permitted to change account names unless they have suffered abuse in chat rooms. Requests for changes must be supported by proof of abuse and must be approved by the Chief Compliance Officer. * In addition to its existing security department, UltimateBet has established a new specialised Poker Security team of professionals dedicated to fraud prevention. * The refund process will begin immediately. The accounts associated with fraudulent activity did not use an unfair advantage in all play sessions. Regardless, UltimateBet is refunding all losses to these accounts. * Accounts related to the fraudulent activity have been disabled, and the individuals associated with those accounts permanently banned from the site. UltimateBet has worked closely and transparently with its governing body, the KGC and its designated expert auditors, to determine exactly what happened, how it happened, and who was involved, and has taken action to prevent any possibility of this situation recurring. Tokwiro is pursuing its legal options in regard to this incident. Hopefully the UltimateBet owners have learned from the Absolute Poker experience and will at some stage expose and prosecute the still unidentified perpetrators of this shocking cheating scandal, the worst yet in known online poker history and believed to involve millions of dollars. Whether UltimateBet will suffer the imposition by the KGC of a hefty fine as was the case with its stablemate remains to be seen. For the full report go to: http://www.ultimatebet.com/poker-news/2008/may/nionio-findings