I recently started coding a discord bot for gambling at the request of a faction mate, and have not yet actually made it live. I have a couple of points if I may.
I see a few post about self exclusion, and how this allows players to go around said mechanics in game.
I added a self exclusion to my bot. From what I gathered, i have no way of seeing self exclusion in an API. Outside of that, when entering the server, it first welcomes you, then gives you the option to self exclude. 48h, 1 week, permanent, with no way to change your mind if you hit forever. This is attached to your torn id, and saved.
Considering scams. I made all my games display actual RTP chances, combined with cryptography to generate a unique hash for every roll. This means every game has set chances, that end users can independently verify.
Obviously I can not comment on what others have made, and can see the potential for scams. As I havent actually done anything more then testing on this bot, I have no actual skin in the game and dont care one way or another how this goes.
I see a worry about RMT. To me this is honestly the real issue. A casino flush with Xanax, shading games to throw wins at players that pay them, and then sending them Xanax as a 'win'. I have thought of no way to verify this, short of passing casino logs off to staff. Which isnt feasible to actually do.