Gamblers’ data compromised after casino giant fails to set password