You're not speaking to the important question, which is whether there is any way for the recipient to tell the originating IP of a bitcoin transaction. I am gathering the answer is "no". If "yes", then there is an obvious place to put the IP restrictions: in the satoshi dice service itself. Obviously, even in this case, it could be defeated with a proxy.