Your apps are great but there is a fundamental bug in them. They can only work because of users TRUST you with their money. I don't tell it's your fault, you made them this way because there was no other way to implement application logic.

The better approach would be a real, auditable and decentralized L1 smart contract system built in the HIVE core. You publish your game logic as an SC, you point your frontend there and people (or an independent auditor) could check the code and decide if it's malicious or not.

I'm not telling that you have bad intentions, just that we could never know for sure and neither you can be sure that your VPS is invulnerable.