OK so I read the T&C's again.
There is no specific rule that says "don't bot". Would be useful if a CM would confirm whether botting is in fact against the rules.
Some parts of the T&C's via which they could address this particular situation:
"Plarium reserves the right to refuse any user access to the Service without notice for any reason, including, but not limited to, any violation of the Terms "
- that is the catch all right at the start of the T&C's. They can effectively do what they want.
"decipher, decompile, disassemble, reverse engineer, or otherwise attempt to derive any code or underlying ideas or algorithms of any part of the Service, including any Service available on or through Third-Party Platforms;"
- you can't write the kind of bot being used without breaking this specific rule (the botter has to analyse the comms from the client to the server and then mimic the instructions the client generates to instruct the server directly
"interfere with or disable any security-related features of the Site or Service, or any part thereof, including any Service available on or through any Third-Party Platforms; "
- I don't know for sure but I suspect that bypassing the client is quite likely to by pass some elements of the games security as well. Be interesting if they log in via the log on server or just generate their own token (which certainly would break this rule).
"Plarium reserves the right to determine what conduct it considers to be in violation of the rules of use or otherwise outside the intent or spirit of these Terms of Use or the Service itself."
- another catch, which means they don't have to write a rule speficially to cover a particular action, it just need to break the spirit of the rules
I think there is enough in the rules to cover banning an industrial scale botter, even if there appears to be no specific anti-bot rule.