I want to ensure that no Bot-players are destroying the game experience of the normal gamers.

You do not know who is sending your server network packets from the other end. You can only assume that those packets are the intention of the player, malicious or not, tied to the identity used to authenticate the connection.

This means that, to weed out bots, you either have to design the gameplay such that bots aren't particularly good, or you have to analyze the actual commands/results gotten, to try to catch bots as outliers in some kind of statistical analysis.

It helps if you charge dollars or some other value (dogecoins? :-) for each account, because that makes the cost of being banned for being a bot higher.

Finally: WCF is not designed for gameplay-type connections. If your game is slow-paced and turn-based, like chess or Monopoly, it may still work OK. In general, it may have significant data size overhead, it may have messaging latency overhead, and it may expose your server to remote RPC attacks, depending on how well you manage to secure it.