R 432.655 Internet wagering account requirements.

Rule 655. To establish an internet wagering account, an internet gaming operator or internet gaming platform provider must do all of the following: (a) Create an electronic authorized participant file, which must, at a minimum, include the following: (i) The authorized participant’s legal name. (ii) The authorized participant’s date of birth. (iii) The authorized participant’s Social Security number, or the last 4 digits of the Social Security number, or an equivalent identification number for a noncitizen authorized participant, such as a passport or taxpayer identification number. (iv) The authorized participant’s internet wagering account number or username. (v) The authorized participant’s residential address. A post office box is not acceptable. (vi) The authorized participant’s electronic mail address. (vii) The authorized participant’s telephone number. (viii) Any other information collected from the authorized participant used to verify his or her identity. (ix) The method used to verify the authorized participant’s identity. (x) The date of verification. (b) Encrypt all of the following information contained in an electronic authorized participant file: (i) Any portion of the authorized participant’s Social Security number or equivalent identification number for a noncitizen authorized participant, such as a passport or taxpayer identification number. (ii) The authorized participant’s passwords and PINs. (iii) The authorized participant’s personal financial information. (c) Verify the authorized participant’s age and identity and record the date of verification in accordance with any of the following: (i) Reliable forms of personal identification specified in the internet gaming operator’s or internet gaming platform provider’s internal controls. (ii) Other methodology for remote multi-source authentication, which may include third-party and governmental databases, as approved by the board. (d) Record the document number of the government issued identification credential examined, if applicable. If a government issued identification credential is not required for registration, the electronic record that details the process used to confirm the authorized participant’s identity must be recorded. (e) Require the authorized participant to establish a password or other access security feature as approved by the board and advise the authorized participant to utilize strong authentication login protection. (f) Record the authorized participant’s acceptance of the internet gaming operator’s or internet gaming platform provider’s internet wagering terms and conditions to participate in internet gaming through the internet gaming operator’s or internet gaming platform provider’s website. (g) Record the authorized participant’s certification that the information provided to the internet gaming operator or internet gaming platform provider is accurate. (h) Record the authorized participant’s acknowledgment that the legal age for internet wagering is 21, and that he or she is prohibited from allowing any other individual to access or use his or her internet wagering account. (i) Notify the authorized participant of the establishment of the account via electronic mail.