Smth in the post about the bots below.
There is two aspects:
How can you determine that really a bot is battling against you, not a human?
Capcha is for the human players on the website front-end
but bots are playing without front-end by transactions directly to the server.