205 CMR 248.03
Account Registration
(1) Any Person registering for a Sports Wagering Account shall provide Personally Identifiable
Information to the Sports Wagering Operator. That information shall include, at a minimum, the
following:
(a) Full legal name;
(b) Date of birth;
(c) Physical address of the Person's principal residence, which address shall not be a post
office box;
(d)
Social Security Number, or the last four digits of the Social Security Number, or an
equivalent Federal Identification Number for a noncitizen patron, such as a passport or
taxpayer identification number;
(e) A telephone number for the patron; and
(f)
Any other information sufficient to verify the registrant's identity and to prove the
registrant is at least 21 years old.
(Mass. Register #1578, 07/17/2026)
(2) During the registration process, the registrant shall:
(a) Not be permitted to register for a Sports Wagering Account if they submit a birth date
which indicates that they are younger than 21 years old;
(b) Be informed on the account application which information fields are "required," which
are not, and the consequences of not filling in the "required" fields;
(c) Be required to agree to the terms and conditions and privacy policies of the Sports
Wagering Operator;
(d) Be required to acknowledge that they are prohibited from allowing any other person to
access or use their Sports Wagering Account;
(e) Be required to consent to the monitoring and recording of the use of their Sports
Wagering Account by the Sports Wagering Operator and the Commission; and
(f) Be required to affirm that the Personally Identifiable Information provided in accordance
with 205 CMR 248.03(1) is accurate.
(3) For each Sports Wagering Account, the Sports Wagering Operator must establish and
maintain an electronic patron file, which must, at a minimum, include the following for each
patron:
(a) Unique patron ID and, if different from the patron ID, the patron's username;
(b) The information provided in accordance with 205 CMR 248.03(1) to register the patron
and create the Sports Wagering Account;
(c) The date and method of identity verification, including, where applicable, the document
number of the government issued identification credential examined and its date of
expiration, if applicable, or, if a government issued identification credential is not required
for registration, the electronic record documenting the process used to confirm the patron's
identity;
(d) The date of the patron's agreements to the terms and conditions and privacy policies,
including those in 205 CMR 248.06, and the date of the patron's agreement,
acknowledgment, consent, and affirmation in accordance with 205 CMR 248.03(2)(c)
through (f);
(e) Account details and current balance, including any incentive credits, provided, that all
restricted wagering credits and unrestricted funds that may expire shall be maintained
separately;
(f) The date on, and method by which, the Sports Wagering Account was registered;
(g) Every date on, time at which, and IP address from which the Sports Wagering Account
is accessed;
(h) If the account is active, the debit instrument used to fund the account, the accountholder's
name, and whether the debit instrument accountholder's name matches that of the patron,
unless impossible; and
(i) The current status of the Sports Wagering Account (e.g., active, dormant, closed,
suspended, excluded, etc.).
(4) The following information maintained as part of the electronic patron file shall be stored
in encrypted form and protected in accordance with all provisions of 205 CMR regarding data
privacy and security:
(a) The patron's social security number, taxpayer identification number, passport number,
other government identification number(s), or portion(s) thereof;
(b) The patron's password(s), PIN(s), or other authentication credential(s); and
(c) The patron's debit instrument number(s), debit card number(s), bank account number(s)
or other personal financial information.