For 12k a month just the DDoS protection would be worth it for a site of that nature and size but they also get CDN access with full control over the caching, and a web application firewall.

The way I see it the casino was trying to plate share at a buffet and got caught so now they are complaining about having to pay the correct amount.