The majority of sweepstakes casinos work with legitimate gaming suppliers, offering fair, RNG-backed games that give every player an equal shot at winning. Tier one suppliers even have their software audited by recognized independent testing labs like BMM Testlabs and eCOGRA to operate legally in regulated, real-money markets.
However, every now and then, we come across a site offering games that haven’t been sourced legitimately. Or worse, systems designed to let an operator tip the scales in favor of specific players.
Unfortunately, KickBack Spins, a platform operated by Cyprus-based TASKITT LTD, is one such site, and the following is a look at the red flags we uncovered on its platform.
Shady Games and Mechanics in the Code
When we first reviewed KickBack Spins earlier this year, we assigned it a low score due to the presence of unauthorized Pragmatic Play games. Following our review, the casino appeared to respond: it removed the Pragmatic Play catalog from its lobby and pivoted to legit games from smaller providers like Mancala Gaming and Funky Games.
On the surface, it looked like an operator cleaning up its act. However, a deeper look into the site’s public files and infrastructure still tells a different story.
The Clone Feed
While the unauthorized Pragmatic Play, PG Soft, and Amusnet catalogs are no longer listed in the lobby, the underlying connection logic has not been removed. The database sync tools, agent API credentials, and connection pathways pointing to external clone endpoints remain fully intact.
Hiding a provider from the frontend UI is merely a configuration choice. If the operator decides to flip that switch back on, counterfeit titles will once again become available to players.
A ‘Force Win’ Tool in the Backend
Even more concerning is what we discovered inside the operator’s staff control panel: a built-in administrative tool titled ‘Create Bonus Win’.
In legitimate casino software, outcomes are strictly determined by certified Random Number Generators (RNGs). Neither the player nor the operator can dictate or manipulate when a spin wins or what multiplier it hits.
However, this back-office feature at KickBack Spins gives the operator the ability to:
- Input a specific player’s username
- Select a game ID
- Set a maximum bet amount
- Assign a custom target payout multiplier
While this mechanism is currently mapped to the dormant clone feed rather than the active third-party studios, its presence, dormant or not, demonstrates the nature of the backend software KickBack Spins integrated.
Awarding certain players specific wins goes completely against the principles of legitimate games of chance, and it allows the possibility for very shady behavior. For example, this might be awarding big wins to a player at the start of their journey on the site, before eventually taking the bonuses away.
More Concerns with KickBack Spins
Beyond these game integrity issues, our analysis highlighted other concerns too.
Exposed Backend Code
KickBack Spins was built using an AI web development framework. During deployment, the operator’s internal routes, administrative permissions, and server function source code were left accessible within the client-side JavaScript bundle shipped to every visitor.
While no active security keys were exposed, shipping backend control logic to the public browser indicates a lack of good development practices.
Based in Cyprus
Player terms specify that the site operates under a software license with TASKITT LTD in Cyprus, while the sweepstakes sponsor is listed as a small development business in Texas (MC Data Solutions LLC).
For US-based players navigating a payout dispute, arbitration clauses point to Cyprus, leaving minimal practical recourse.
According to the current terms at KickBack Spins:
“21.1. GOVERNING LAW: The parties agree that this Agreement and the Services associated with it are governed by and are to be interpreted in accordance with the laws of the Country of Cyprus, without regard to its principles of conflicts of law.”
Poor Payout Rules
While the platform accepts various payment types, redemptions carry a 100 SC minimum, a $400 daily cap, variable processing fees, and potential timeframes extending up to 10 days.
This is illustrative of a platform that isn’t making it easy for players to cash out any large sums easily.
What This Means for Sweepstakes Players
Overall, the case of KickBack Spins reminds us that an appealing lobby in the frontend can still hide unwanted secrets under the hood.
It’s easy for an operator to hide problematic frontend categories, update promotional banners, or display legitimate games after being called out. But when the underlying platform houses tools to manipulate outcomes unfairly and dormant clone scripts, the operator cannot be trusted, at any point.
Really, it’s not surprising, as Kickback Spins is a sister site to JackTrix, another site we blacklisted earlier this year. It had the same bunch of suppliers like Amatic, Amusnet, PG Soft, and Pragmatic Play, but has since pivoted to more legit suppliers, just like KickBack Spins.
We did mention JackTrix in our previous article titled The Questionable Software Powering Multiple Pragmatic Sweeps Casinos earlier this year, and that piece shows it’s far from just TASKITT LTD casinos that are running dodgy sites. But we do stand by our initial analysis, leaving JackTrix on our blacklist, and now KickBack Spins will join it. Other casinos from the same group include RedTails VIP Lounge and SweepstakesOnline.com (not fully reviewed, instant blacklisting).
SweepsKings will not partner with or recommend operators that utilize outcome-manipulating software or counterfeit game feeds, and we strongly advise players to stick to fully vetted, transparent sweepstakes casinos that use certified RNG software.
One of the best ways to tell these two types of casino apart is by reading our reviews and other resources, including our blacklist. This way, you can enjoy safe sweepstakes gaming with fair outcomes without getting scammed.
Author: Bogdan Lunkan
Updated:
