That's why it is called Bonus because each players are entitled to take them out , but it is not a reason to abuse them , meaning if you are giving a bonus just use on the limit the site has given and not to extend the advantage once we find a leak or some irregularities to the site.
so I believe that Both are to blame here, it is the team who does not secure their site? and the players who take advantage of the situation .
I just came to realize that bonus abuse isn't really because of the site's lack and poor security but rather there are flaws in the Terms. Sometimes the site thinks that everything is smooth but as always, abusers will really find a way to take advantage of those flaws. They will just realize that something not right is happening after several weeks or even months.
As far as I know, bonus abuse is often accompanied by multi-accounting and many casinos declared multi-accounting isn't allowed and that doing so is against their Terms of Service. There are also mention of promotional abuse to be a ground for account termination.
11. Prohibited Uses
PERSONAL USE. The Service is intended solely for the User's personal use. The User is only allowed to wager for his/her personal entertainment. Users may not create multiple accounts for the purpose of collusion, sports betting and/or abuse of service.
source:
https://stake.com/policies/termsTermination
We may terminate or suspend Your Account immediately, without prior notice or liability, for any reason whatsoever, including without limitation if You breach these Terms and Conditions.
Any attempts to commit fraud against the Website, the Company, or another Customer of our Services will result in an immediate termination of your Account on duelbits.com. This includes fraud and attempted fraud against our users via Steam or Cryptocurrency wallets or abusing promotions on or for duelbits.com or free on-site credit gifts.
Upon termination, Your right to use the Service will cease immediately. If You wish to terminate Your Account, You may simply discontinue using the Service.
Multiple accounts per household IP/Subnet. If multiple natural persons from the same household wish to access duelbits.com please inform our Support first and complete the verification for each of them. Our Support will gladly assist you in the verification and explain to You everything, that is needed from You.
source:
https://duelbits.com/tosYou warrant not to create any additional accounts from the same electronic device, household, IP address, natural person, or legal identity without informing the Roobet support team immediately. Multiple accounts made in order to trick, manipulate or trick the company's system in any way are not allowed and will be terminated without warning. All Roobidos in a terminated account will be lost. All accounts made to circumvent the company's KYC and AML checks and verifications will be reported to the authorities. Further information regarding the KYC and AML checks and verification can be found in our KYC-AML Policy. You warrant to report any additional account created by yourself or a close relative sharing an electronic device, household, IP address, or identity card without delay to the Roobet Support and fully verify it according to the KYC-AML policy.
source:
https://roobet.com/termsandconditions10.5. Bonuses can only be received once per person/account, family, household, address, e-mail address, IP addresses and environments where computers are shared (university, fraternity, school, public library, workplace, etc.). The Operator reserves the right to close your account and confiscate any existing funds if evidence of abuse/fraud is found.
source:
https://livecasino.io/help-center/help-terms-and-conditions/terms-and-conditionsSo I think that bonus abuse is covered by the TOS of many casinos as ground for account banning or termination.