Updated: 17 August 2026
Access requires the email address supplied at registration and the account password. Most sign-in failures trace to one of five causes, listed below with the resolution for each.
- Standard sign-in procedure
- Confirming the domain is genuine
- Password recovery
- Two-factor authentication
- Locked or suspended accounts
Signing in from desktop or mobile
The procedure is identical in a desktop browser and on a phone; no application is required for account access.
- Open the site in any browserChrome, Safari, Edge and Firefox are all supported. The login control sits next to the registration button in the site header.
- Enter the registered email address and passwordThe email supplied at sign-up serves as the account identifier. Accounts created through Google or Telegram use those services for authentication instead.
- Complete two-factor verification if enabledWhere 2FA is active, a code from the authenticator application is requested after the password.
Sessions persist across desktop and mobile. Full detail on mobile access, including the question of whether a downloadable application exists, is covered on the mobile platform page.
Confirming the domain before entering credentials
Search results for this brand include a number of sites presenting themselves as the official Gizbo destination. Several publish licensing details that do not match any registry entry — one attributes a Kahnawake Gaming Commission licence numbered KGC-2023-075 to the brand and names a corporate operator that appears nowhere else. Entering account credentials on such a site exposes them to whoever runs it.
Three checks establish authenticity, and all three appear in the footer of any page on the genuine site.
| Check | Expected value |
|---|---|
| Licence number | OGL/2024/169/0146, issued by the Curaçao Gaming Authority |
| Named operator | GALAKTIKA N.V. |
| Registered address | Scharlooweg 39, Willemstad, Curaçao |
Any deviation is disqualifyingA different licence number, a different operator name or an absent address means the site is not operated by GALAKTIKA N.V., whatever its domain or branding suggests. A valid TLS certificate proves only that traffic is encrypted — it says nothing about who receives it.
Recovering a forgotten password
- Select the password recovery link on the login formIt appears directly beneath the password field.
- Submit the registered email addressThe reset link is sent only to the address held on file, which is why a mistyped registration email causes recovery to fail silently.
- Follow the link and set a new passwordReset links expire. Where one has lapsed, a fresh request generates another.
- Sign in and re-enable two-factor authentication if promptedSome reset flows require 2FA to be reconfigured afterwards.
Where no reset email arrives, three explanations cover almost every case: the message was filtered into a junk folder, the address on file differs from the one being entered, or the account is subject to a hold that suspends automated recovery.
Registering again is not a workaroundCreating a second account to bypass a lost password breaches the one-account rule that applies per player, per household and per IP address. Duplicate accounts are identified during identity verification, and bonuses along with any winnings derived from them are voided. Live chat resolves recovery cases directly.
Two-factor authentication and account protection
Two-factor authentication is available in the account security settings and is worth enabling on any account holding a balance. Player reports for this brand include claims of unauthorised access followed by unrecognised bets — password-only protection cannot prevent that scenario once credentials are compromised elsewhere.
- Open security settings within the account profileTwo-factor authentication appears alongside password management.
- Link an authenticator applicationAny standard time-based authenticator will pair with the displayed code.
- Store the recovery codes before finishing setupThese are the only route back into the account if the authenticator device is lost. Recording them at this point, rather than later, is what makes the difference between an inconvenience and a permanently inaccessible account.
- Confirm with a generated codeTwo-factor prompts then appear at every subsequent sign-in.
Why accounts get locked, and what each cause means
A locked account and a blocked withdrawal are different states, and the distinction matters. Incomplete verification typically halts payouts while leaving gameplay available; a security review suspends the account entirely.
| Cause | What it means | Resolution |
|---|---|---|
| Incomplete verification | Withdrawals are held; the account itself usually remains usable | Submit photo ID, proof of address dated within 90 days and payment confirmation. See the withdrawal page. |
| Suspected duplicate account | Two registrations matched on player, household or IP address | Contact support with details of both. Bonuses attached to the duplicate are forfeited. |
| Security review on a large payout | Requests above C$1,875 trigger additional checks | Supply the documentation requested. The review is procedural rather than a refusal. |
| Active self-exclusion | A cooling-off period or exclusion is running | Not reversible on request. This is the control functioning as intended. |
| Breach of bonus terms | Maximum bet exceeded, or excluded games played with a bonus active | The bonus and associated winnings are voided; the cash balance is normally unaffected. Terms are set out on the bonuses page. |
On self-exclusionAn exclusion cannot be lifted by contacting support, and staff have no discretion to override it. Anyone who set one and now wants it removed is encountering precisely the protection they requested.
Shared devices, public networks and session hygiene
Casino accounts hold payment credentials and identity documents, which places them closer to online banking than to ordinary entertainment logins.
- Passwords should not be saved in browsers on shared or public machines.
- Financial transactions on unsecured public networks carry avoidable interception risk.
- Two-factor authentication substantially limits the damage of a leaked password.
- Recovery codes belong somewhere other than the device running the authenticator.
Ending a session deliberately
Signing out closes the session rather than merely hiding it, which matters on any device others can reach. It also serves a second purpose: a deliberate exit is a natural stopping point, and session time limits together with reality checks — both configured in the account profile — reinforce that boundary automatically.
Support for problem gamblingSession limits, reality checks, deposit and loss limits, cooling-off periods and self-exclusion are all set from the account profile without contacting support. ConnexOntario offers free confidential help at 1-866-531-2600, with equivalent services in every province.
Access questions
How can players confirm they are on the official Gizbo site?
What should be done about a forgotten Gizbo password?
Why would a Gizbo account be locked?
Does Gizbo Casino offer two-factor authentication?
Can a self-excluded account be reopened?
Login procedure, security settings and account-restriction causes confirmed against the operator's interface and terms on 17 August 2026. Domain verification details reflect the footer of the licensed site as at that date.