GGPoker review: security and game integrity
By Raul Moriarty ·Poker Software Expert
This review looks at one thing. Not the bonuses, the Spin & Gold economy or the game selection, but whether GGPoker keeps your money, your identity and the fairness of your seat intact. On that axis it rates above the private club apps most of our readers put it next to. GGPoker writes bots, real-time assistance and outside tools into a zero-tolerance rulebook, reserves the right to scan the machine you play on, runs cash tables that no external HUD can read, and has three times taken money back from banned accounts and handed it to the players they beat. The weak spot is what it tells you afterwards. Enforcement is announced one case at a time and never as an audited total, so the single number a careful player wants, how much automated and assisted play actually clears the net, stays inside the security team. Our editorial security score is 7 out of 10.
The review in six lines
- The Security and Ecology Policy (the "SEP") bans bots, RTA, data mining and any auxiliary tool outright. The standard penalty is a permanent ban and confiscation of the balance.
- The same policy lets GGPoker scan your device and match its files against profiles of known cheating software.
- Cash tables are anonymous and aliases rotate, so nobody builds a HUD on you across sessions, and you cannot build one on them.
- GGPoker has clawed back and redistributed funds in three dated cases: RTA in 2020 (about $1.18 million), an exploit in 2023 (about $30,000) and a WSOP Online ghosting case in 2025 (more than $1.1 million).
- There is no consolidated report. You get named cases, never a monthly rate or a detection method.
- It suits players who want hard enforcement and heavy anonymity, but poorly serves anyone who wants public, audited integrity numbers.
What GGPoker's security promises, and what it means at the table
GGPoker keeps its security rules in one document, the Security and Ecology Policy, usually shortened to the SEP. It opens by naming the behaviours it will not allow, then attaches almost the same penalty to each of them: a permanent ban and confiscation of funds. GGPoker is not setting up to referee minor etiquette. It is telling you that the categories it lists, automated play, real-time help and outside tooling, all draw its heaviest penalty, and that "any decision rendered by the Security Team is final."
The room is built by rule to be hostile to cheating software, which is good for you if you sit down honestly. It also keeps the discretion to act without showing its working, which you accept as a condition of playing. How that rulebook maps onto the actual volume of bots is a separate question, and we work through it in does GGPoker have bots.
A security scorecard for GGPoker
We score five security dimensions. Each is out of 10, and the reasoning for each sits in the sections below.
| Dimension | What GGPoker does | Can you check it yourself? | Score |
|---|---|---|---|
| Rulebook clarity | Bots, RTA, data mining and auxiliary tools each defined, each with a penalty ladder in the SEP | Yes, read the SEP (linked below) | 8/10 |
| Account and funds security | Identity check before a cashout, a device-scan clause, confiscated balances returned to victims in named cases | Partly: the cashout check you meet, the scan and the returns you take on the operator's word | 7/10 |
| Enforcement record | Dated public actions in 2020, 2023 and 2025, each ending in a refund | Partly: 2020 is first-party, 2023 and 2025 rest on the poker press | 7/10 |
| Table-level fairness | Anonymous seats, rotating aliases, anonymised hand histories, no external HUD | Yes, visible the moment you play or export a hand | 7/10 |
| Transparency and reporting | Case-by-case announcements, no audited totals, detection methods undisclosed | Yes, the absence is checkable too | 5/10 |
That puts the combined security score at 7 out of 10, and the rest of this review is how we reach it.
The rulebook: where the SEP draws its hard lines
Three clauses in the SEP carry the weight. Real-time assistance is "any external assistance which provides users with an unfair advantage over their opponents, influences their decision making in real-time, or allows them to play in a manner they otherwise would not be able to replicate." "Referring to charts of any kind during play is strictly prohibited." A printed chart taped beside the monitor is as bannable as a running solver.
Bots are "software, programs, websites or apps that enable playing without human intervention or reduce the requirement of a human to make decisions," and the text names "artificial intelligence, fully and partially automated bot." The widest clause is the one on auxiliary tools, where GGPoker states a "zero-tolerance policy towards the use of any auxiliary software, utilities, or services," so that "any external software that supports, interacts with, augments, or manipulates a client or the gameplay experience in any capacity is strictly prohibited." The same clause reaches anything that would "conceal, alter, or spoof" your location, hardware identity or operating environment, which is how VPN-style spoofing and seating aids land here too.
Behind all of it is section 1.10, where GGPoker reserves the right to scan the device you play on and match its files against profiles of known illicit programs. It is the mechanism that makes the rest enforceable, and it is also the clearest privacy cost of playing here, because you are agreeing to let the client look at your machine. How detection then assembles a case against an account is covered in GGPoker detection.
Confiscations and refunds in 2020, 2023 and 2025
Unlike club apps that stop at policy text, GGPoker has moved money out of cheating accounts and back to the players who lost it in three public cases:
| Date | What happened | Money moved | Where it is sourced |
|---|---|---|---|
| 30 Sep 2020 | First major RTA sweep, announced in GGPoker's "Battle Against Real-Time Assistance" | 13 accounts banned, $1,175,305.43 confiscated and marked for return to players; 27 more banned; 40 warned | GGPoker blog (first-party) |
| 29 Dec 2023 | A single account exploited a security weakness | 1 account banned, about $30,000 seized and redistributed to affected players | Poker Industry PRO, Jan 2024 (poker press) |
| 14 Nov 2025 | A $25,000 buy-in WSOP Online bracelet event decided by account sharing (ghosting) | Winner disqualified, bracelet revoked, players permanently banned, more than $1.1 million redistributed | Pokerfuse and LifeOfPoker, Nov 2025 (poker press) |
Solver assistance, a technical exploit and human collusion are three separate problems, and GGPoker has acted on all three with real confiscation rather than a quiet suspension. The 2020 figures are the only ones it attached to its own name down to the cent. The 2023 and 2025 numbers come from the poker press, not a first-party report.
Anonymous tables protect you and hide the table at once
GGPoker's cash games are anonymous. You see an avatar and a seat, your opponents see the same, and the alias every player carries rotates between sessions, so nobody can follow anyone from one day to the next. Exported hand histories come out anonymised as well. PokerTracker's own support has told users the player names in GGPoker exports are stripped, so a third-party database has nothing to key on. Put that next to the SEP line that you may import only your own hands, and the external HUD is finished. GGPoker offers its in-client Smart HUD instead, and even that resets as the aliases rotate.
It protects you, because a winning player cannot be targeted, bum-hunted or data-mined by a stable of regulars. It also blinds you, because you cannot scout the table either, and the same anonymity that stops a HUD makes a quiet bot or a colluding pair harder for a human across the felt to notice. How that interacts with rake and the volume a bot needs sits in GGPoker rake and bots.
Where GGPoker's transparency runs out
It will tell you it caught a group in 2020 and name the figure to the cent. It will not tell you how many accounts it bans in a normal month, what share of hands it flags, or how its detection decides. The 2020 post is six years old and is still the only time it put hard confiscation numbers next to RTA. The 2023 and 2025 cases come through the press. Because "any decision is final," there is no published appeals record.
The score is 7, not 9. The policy and the dated actions are real and checkable. The day-to-day rate is not, and a player who needs audited integrity numbers will not find them here, nor at any competitor running the same kind of game. For why a ban count would tell you less about live bot volume than it looks like it should, see does GGPoker have bots.
Our verdict: who GGPoker's security fits
GGPoker's security weakness is its unpublished integrity reporting. It fits a player who wants hard enforcement and heavy anonymity, who is comfortable with a client that can inspect the device, and who accepts "funds confiscated and returned" as evidence of enforcement. It fits worse for a player who wants to verify integrity independently, scout opponents or run their own tracking, because the anonymity that shields you removes those options and the reporting to check the operator is not published.
Our editorial security score is 7 out of 10: 8 for the clarity of the rulebook, 7 for the enforcement record and for table-level fairness, and 5 for transparency. The gap to a 9 is reporting the operator chooses not to publish.
Questions players ask about GGPoker's security
Is GGPoker safe to deposit on?
On the parts a player can check, it sits at the stronger end of the market: identity verification before a cashout, a client that enforces its own rules, and licensing and RNG certification you can confirm on the operator's and your regulator's own pages. Those pages are published, so treat the safety question as one you verify for your region rather than take on trust.
Can GGPoker really scan my computer?
Its policy reserves that right in section 1.10 and ties it to matching files against known cheating software. Installing the client is how you agree to it. If that reach bothers you, it is the single clause to settle before you play, because it is not optional once you are in.
Does the anonymity make bots easier to hide?
No external HUD can track anyone, which stops data mining but also removes the human read that sometimes catches a bot. GGPoker leans on its own network-side detection to cover that gap, and how far that reaches is the subject of does GGPoker have bots.
Where these figures come from
- GGPoker’s Security and Ecology Policy, read 9 November 2026: ggpoker.com/network/security-ecology-policy/
- GGPoker, "Battle Against Real-Time Assistance," 30 September 2020
- Poker Industry PRO, report on a GGPoker security-breach refund, January 2024
- Pokerfuse and LifeOfPoker, on the GGPoker WSOP Online disqualification and redistribution, November 2025
- PokerTracker support forum, on anonymised GGPoker hand histories, 2022