Use a unique password
Your website password is also your game password. Use it nowhere else, and never share it -- staff will never ask for it.
Verify your email
Verification creates your game account and protects recovery. It is also required for top-ups and support requests.
Turn on two-factor authentication
An authenticator app on your phone stops somebody with your password from signing in to the website. Review active sessions on the security page and sign out anything unfamiliar.