Sign in to Betmica: how the login flow works on our platform
We use this page to describe the sign in flow on our platform. We do not collect account credentials on this page. If you already have a Betmica account, the sign in itself is done from the panel that opens behind the Log In button on every page of the site, and we walk through what that panel asks for below. If you do not yet have an account, the last section of this page names the route we ask you to take, and we have kept the language plain so that the whole flow can be read in one sitting.
What the sign in panel asks for
Our sign in panel opens as an overlay rather than as a fresh navigation, so a player who signs in from the promotions page or from the bonuses page lands back on the same page the moment the session opens. The first step of the panel asks for the account email and the account password. The account email is the address you registered with, and the account password is the one you set at registration or that you last set on a password reset. We do not use a separate user handle for sign in and we do not use a phone number as a sign in identifier on our platform.
The second step of the panel is the two factor authentication step, and it appears when two factor authentication is enabled on the account. The step asks for a six digit code from the authenticator app you have paired with the account. We support any authenticator that implements the standard time based one time password format, including the widely used desktop and mobile authenticators. The step includes a Trust this device toggle at the bottom of the panel, and the toggle is what governs whether the second factor is required on a subsequent sign in from the same laptop or the same phone.
Two factor authentication and device trust
Two factor authentication is optional at registration and mandatory the moment an account carries a certain withdrawal ceiling. Once mandatory it is enforced on every new device the account is signed in from, and the pairing is set from the security tab on the account. We ask the player to keep a set of backup codes from the security tab, because the backup codes are the route we ask you to take when the paired authenticator is not to hand. The backup codes are single use and we ask you to store them offline rather than in the same cloud vault as the authenticator itself.
Device trust reduces the friction on the second step of the sign in but does not remove the second factor from the account. On a trusted device we skip the second step of the panel on subsequent sign ins, and on any new device the second step is enforced again. The trust flag on the device can be removed from the security tab on the account, and we clear the full trust list when the account password is reset.
Password reset: how we handle it
Password reset is opened from the Forgot password link on the sign in panel. The link asks for the account email address, and a reset email lands within minutes on the address we have on file. The reset email carries a single use link that expires inside one hour on our timer. Once the link is used, or once the hour is passed, the link is invalidated and you can request a fresh reset from the same panel.
The reset link opens a page on our platform that asks you to set a new password. We ask for a minimum length and for at least one number in the password, and we recommend passing through the browser password manager on your device to store the new password in a way you will actually retrieve on the next session. The full trust list for the account is cleared the moment the new password is set, so the next sign in from a paired device will ask for the second factor even if the device was trusted before the reset.
Account lockout and support
If the sign in panel returns a repeated password error, we lock the account after a small number of failed attempts to protect it from an automated attempt. The lockout is timed rather than permanent and it clears after a short window, but if you would rather clear the lockout immediately we ask you to open a chat with our support desk from the help link on the footer. The desk can verify the account through the security details on file and clear the lockout on the same session, and it can also confirm whether a two factor authentication reset is required if the paired authenticator has been changed on your side.
Opening a new account
If you do not yet have a Betmica account, the route we ask you to take is the Open account link that carries you to our sign up page. We do not collect account details on this page because we would rather send you to the page that carries the full intake flow, including the country pick, the age tick and the terms tile. Once the account is opened, the sign in flow described on this page is the one you will use on every subsequent session, and the security tab on the account is where you can pair an authenticator, add backup codes and set the trust list for your devices.