Firstly the email address receiving the spam is highly unlikely to be “guessable” by spam bots or dictionary attacks. It has multiple strings separated by a delimiter and such and is with a major major email provider (think hotmail, gmail, yahoo). We were suspicious before we did this so we purposefully made it obtuse.
I’ve done some more digging.
This “First Principle Group” is the bad apple here. No mention is made of them on GoldenCasino.com. But their privacy policy sounds deliberately vague to me:
Sharing and Control Over Your Information
GoldenCasino.com does not and shall not sell your User Information to anyone. Our parent management company may share your information between other sites that it manages, but will never provide your User Information to a third party for sale or rental. Within our gaming software, the user may update their personal information.
No mention of who or what the “parent management company” is. I thought they belonged to something called Hambledon (?). Also, while precluding selling your info, they don’t say they won’t give it away for free (or is that just me being too suspicious?).
But I found this supposed anti-spam policy at goldencasino-online.com (which I presume is an affiliate account’s “shell” pointing people to goldencasino.com).
http://www.goldencasino-online.com/anti_spam_policy.html
Notice at the bottom that the First Principle Group asserts the copyright.
The spam I’ve seen come through is advertising many other casinos. eg
First Principle Group obviously has access to every new account made at Golden Casino and is adding these addresses to their spam list as soon as people sign up.
And the cheating Mulligan Poker software that very few people seem to have noticed.