So... the backend of this game queries the database even if the user name is NULL? And the CPU user uses a magic name 'cpu', which is not a reserved name? And apparently the backend is totally okay with a user name that doesn't exist in the database?
Either this story is just an ad, or this game has been really badly build and some h4x0r is going to have a field day with this.