Current through September 21, 2024
(a) A patron must
have an established sports wagering account with the sports wagering operator
or sports wagering vendor to participate in online sports wagering. An account
shall only be established in the name of an individual eighteen (18) years of
age or older and is non-transferable.
(b) A sports wagering operator or sports
wagering vendor must collect the following personal identifying information
(PII) from the individual for each patron:
(i) The patron's full legal name;
(ii) The patron's date of birth;
(iii) The patron's principal residential
address. A post office box is not acceptable;
(iv) The patron's Social Security number, or
the last four (4) digits of the Social Security number, or an equivalent
identification number for a noncitizen patron, such as a passport or taxpayer
identification number; and
(v) Any
other information collected from the patron used to verify his or her identity
and to prove the patron is at least eighteen (18) years of age.
(c) During the registration
process, the patron shall:
(i) Be denied the
ability to register for a sports wagering account if they submit a birth date
which indicates that they are under the age of eighteen (18);
(ii) Be informed on the account application
which information fields are "required," which are not, and what will be the
consequences of not filling in the required fields;
(iii) Agree to the terms and conditions and
privacy policies of the sports wagering operator or sports wagering
vendor;
(iv) Acknowledge that they
are prohibited from allowing any unauthorized person to access or use their
sports wagering account;
(v)
Consent to the monitoring and recording of the use of their sports wagering
account by the sports wagering operator or sports wagering vendor and the
Commission; and
(vi) Affirm that
the PII the patron is providing to open the sports wagering account is
accurate.
(d) Unless
otherwise noted on the account application, the address provided on the
application to establish the account is deemed the address of record for
mailing checks, statements of account, account withdrawals, notices, or other
correspondence. It is the responsibility of the patron to notify the sports
wagering operator or sports wagering vendor of any address change.
(e) A sports wagering operator or sports
wagering vendor must maintain an electronic patron file, which must, at a
minimum, include the following for each patron, as applicable:
(i) Unique patron ID and username (if
different);
(ii) The information
indicated in subsection (b) to register a patron and create the
account;
(iii) Encrypted PII,
including the government identification number (full or partial social security
number, taxpayer identification number, passport number, or equivalent),
authentication credential (password, PIN, etc.), and personal financial
information (debit instrument numbers, credit card numbers, bank account
numbers, etc.);
(iv) The date and
method of identity verification, including, where applicable, the document
number of the government issued identification credential examined and its date
of expiration, if applicable. If a government issued identification credential
is not required for registration, the electronic record that details the
process used to confirm the patron's identity must be recorded;
(v) The date of patron agreement to the terms
and conditions and privacy policies;
(vi) Account details and current balance,
including any incentive credits. All restricted wagering credits and
unrestricted funds that have a possible expiration shall be maintained
separately;
(vii) Previous sports
wagering accounts, if any, and reason for de-activation;
(viii) The date and method from which the
sports wagering account was registered;
(ix) The date and time a sports wagering
account is accessed by any person, including IP Address; and
(x) The current status of the sports wagering
account (e.g., active, dormant, closed, suspended, excluded, etc.).
(f) A sports wagering operator or
sports wagering vendor shall allow the patron to update authentication
credentials, registration information and the account used for financial
transactions. A multi-factor authentication process shall be employed for these
purposes.
