This place has a very high reputation.
A lot of people have keyloggers on their machines, and there might be a dozen people who have access to that account and who may check it daily to see if anything of interest is on it. If somebody with access to an account suddenly found 10 million gold on it, that gold would probably disappear (via Bounty Hunter or whatever means) within 10 minutes. A lot of people give friends access to their accounts. If a friend logged on and found 10 million in gold, they might take it.
The gold sites know this, so many of them will not only set a password, they'll also set a bank pin. That way, nobody can take anything that they've put on the account out of the bank. Once they're done putting the gold on the account, they'll send you an email with your password and bank pin. At that point, they're done with the account, and they expect you to change your password again.
Before you change your password or do anything with your account, you might want to scan your machine with a good Antivirus program.
In my opinion, anybody who scams a reputable site (by charging back a Paypal payment, for instance) is a worthless piece of shit.