The phone authentication mechanism for customers to change account information only required name and birthdate. This is a clear violation to GDPR and the Federal Data Protection Commissioner showed these laws are not being taken lightly. https://techwagyu.com/10m-gdpr-fine-why-we-need-gdpr-in-bug-bounties/
After watching this video, that tells you a good time to quit gambling, I decided to create a game to test the theory.
This game is very simple: given N numbers, that could have the value 0 to googol (10 ** 100 | the number 1 with 100 zeros), you choose a number. You can go home with that number (if you think that is the biggest one) or you could choose