Here's but two examples that I could find, h/t to Sadsong for doing the real work and finding these colluders:
On (or before) May 18th, you were alerted that "Samony(1472227)" was colluding at the tables:
https://bt.irlbtc.com/view/1917896.msg19083152#msg19083152All of the observed hands are in that link.
Players:
satoshi [734546]
samony [1472227]
Both have been busted prior and are repeat offenders.
Thing the above players like to do now is appear to be playing but they always balance out their accounts near the end. Its just to bypass the initial look,its becoming a new pattern for those already warned or talked to about it.
Other tell is how when one sits out/disconnects the other account will wait for a super long time. Most players move on and sometimes you will just catch one of the accounts sitting alone forgotten.
On May 21st, he cashed in a tournament:

Here's a screenshot of two people with user numbers 6 away from each other [2196342 and 2196348] both cashing in a tournament:

What are the odds!
These are but two examples of cheaters profitting off of their cheating that I found in a few minutes, using Sadsong's excellent research.
Questions:
1. Why were these players, who colluded openly and obviously, allowed to collude on your platform?
2. Why did your security team not catch these obvious acts of collusion? Why they were shown to your security team, why did they not take action?
3. What happened to the illicit money that was won by these players? Has it been refunded to the players that were cheated? If yes, when. If no, why not?