Current through Register Vol. 56, No. 18, September 16, 2024
(a)
Each RGS that provides game content to another Internet gaming operator shall:
1. Maintain internal controls for all aspects
of gaming operations prior to implementation and any time a change is made
thereafter. The internal controls shall include detailed procedures for system
security, operations, and accounting;
2. Maintain internal controls approved by the
Division that address compliance with N.J.A.C.
13:69O-1.5(p);
3. At a minimum, employ personnel responsible
for:
i. The duties of an IT Department as
detailed by N.J.A.C.
13:69D-1.11(b)3 and
2;
ii. Ensuring the operation and
integrity of gaming and reviewing all reports of suspicious behavior;
and
iii. Ensuring compliance with
standards and controls detailed in N.J.A.C.
13:69D-2.5 and
13:69O-1.5, 1.7, and
1.8;
4.
Perform an annual system integrity and security assessment conducted by an
independent professional selected by the licensee, subject to the approval of
the Division. The independent professional's report on the assessment shall be
submitted to the Division annually and shall include all requirements of
N.J.A.C.
13:69O-1.2(q);
5. Install and utilize primary and backup
gaming equipment in a restricted area in accordance with N.J.A.C.
13:69O-1.2(n);
and
6. Provide the Division with
physical and logical access to the RGS to review and collect all data contained
therein.
(b) An RGS shall
only offer to an Internet gaming operator games approved by the Division and
shall notify the applicable Internet gaming operator(s) and the Division when a
game is disabled, regardless of the reason.
(c) An RGS shall only void games via a
procedure agreed upon between the RGS and affected Internet gaming operator(s)
or after being noticed of the need for a void by the Internet gaming
operator.
(d) Each RGS shall
respond to the Internet gaming operator(s) for any issue received related to a
patron or other game issue with a resolution within three calendar
days.
(e) Any feature that allows a
user to manually input or override any game transaction shall be submitted to
the Division for approval prior to use.
(f) Each RGS shall monitor for and
immediately report to the appropriate Internet gaming operator(s) and the
Division any malfunction or security incident that adversely affects the
integrity of critical data or system functionality.
(g) Each RGS shall obtain approval from the
Division for the use of a Content Delivery Network (CDN) prior to
implementation or implementation of a change to an approved CDN.
(h) Each RGS shall generate and distribute,
through Secured File Transfer Protocol (SFTP), or other approved method, to
each casino licensee with which it has one or more approved integrations, and
the Division the following reports in order to verify the taxable revenue
reported pursuant to
N.J.A.C.
13:69O-1.9:
1. Game Summary Report, which shall be
generated on a daily basis for all completed transactions for each game:
i. Internet gaming authorized site and/or
skin name;
ii. Game name;
iii. Total number of transactions;
iv. Total amount wagered;
v. Total amount paid out; and
vi. Total win/loss;
2. Pending Transaction Report, which shall be
generated on a daily basis and separately itemize all outstanding pending
transactions for each Internet gaming authorized site. The report shall include
the gaming date for which it is generated, be cumulative to include all
incomplete games and include the following:
i.
Internet gaming authorized site name;
ii. Game name;
iii. Transaction date and time;
iv. Transaction identifier;
v. Unique patron identifier;
vi. Status;
vii. Amount of the wager; and
viii. Amount of the win, if known;
and
3. Void Transaction
Report, which shall be generated on a daily basis and separately itemize all
voided transactions for each Internet gaming authorized site and include the
following:
i. Internet gaming authorized site
name;
ii. Game name;
iii. Transaction start date and
time;
iv. Transaction end date and
time;
v. Transaction
identifier;
vi. Unique patron
identifier;
vii. Amount of the
wager;
viii. Amount of the win, if
known;
ix. Name of the employee or
automated process performing the void; and
x. Reason for the void.
