They also likely have dedicated engineers at larger companies who are proactively 'training' the protection mechanisms.
DDoS protection isn't just 'let's turn this thing on.' It has to know which requests are legitimate and which are not and for something small and unusual as this game it probably has to be done by hand until it's 'smart' enough.