Session management binds a time‑limited token to each browser, prompting step‑up verification via email or SMS if accessed from an unrecognized IP range. This prevents account takeover even if a password is exposed elsewhere. Tablet play receives the same shield, giving all Canadian players consistent cross‑device protection.