Well of course a username and password is required, how else would it access your account to place the bets? The bot is completely open source so you can verify that it doesn't attempt to steal the funds from your account or send your username and password somewhere for illicit use. The bot uses https as far as available.
allright i wish you were right , most of them use keylogge in their software to steal the account . i wish this one is not
This one is open source for that exact reason. The bot self is open source and it uses only open source libraries (jdcapi, sqlite, signalr, newtonsoft.json and sharplua are all opensource). You can check the code for any keylogger or other malicious code and compile it yourself if you are happy that it's safe. If you don't want to or don't know how to, It might be reassuring that in the year and a half the bot has been around, I've had no complaints that the bot stole money from anyone. You can check this thread for any such post. My bot is pretty well trusted on the sites that it support, feel free to ask around whether it's safe or not.