How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?
Don't take my advice serious if you are soft hearted, but if you are hard hearted and do not want to be cheated, then maybe you can take this advice.
First, you have to check if the casino has a bug bounty program and are willing to pay hunters who discover and report critical buds.
Secondly, is the casino a big casino or a small one, this is important because, a big casino that is already established and earned a good reputation may like keep to their promise of paying you for your bug discovery.
But small casinos may want to cheat you for reasons I think Is obvious.
So, if you are dealing wit a small casino, I would say that, if the bug allows you to steal some funds from the casino by exploiting it, then exploit the bug and steal from the casino, but immediately reach out to the casino and promise to return every penny you stole back to them once you get your bug bounty payment, if they pay, return the money stolen back to them, but if they don't, then maybe you keep what you stole as your payment for reporting the bug.
But if the bug does not allow you steal funds or user information from the casino, then just report the bug to them and don't expect to be paid, for casinos will naturally not consider such bugs critical enough to worth paying for.
This I believe is the only way to avoid being cheated by a small casino that possibly wil not want to keep to their promise of paying users for bug discovery.