BC.Game profile was accessed despite two-factor authentication

My BC.Game profile was compromised even though I had two-factor authentication enabled. Someone connected a C Wallet to my profile without my authorization.

While I was playing, I won $3,500. The connected wallet was then used to withdraw the money. I contacted both BC.Game support and C Wallet support, but I am still trying to understand how the account connection was permitted.

I am posting this as a warning that two-factor authentication did not prevent the unauthorized wallet connection in my case. I would appreciate advice from anyone who has dealt with a similar withdrawal or knows what account records should be preserved.