For 12k a month just the DDoS protection would be worth it for a site of that nature and size but they also get CDN access with full control over the caching, and a web application firewall.
The way I see it the casino was trying to plate share at a buffet and got caught so now they are complaining about having to pay the correct amount.
TSA literally says on their own website that they are not looking for drugs and will only report it to the police if it’s blatant.
-source