R 432.755 Internet sports betting account requirements.

Rule 755. To establish an internet sports betting account, a sports betting operator or internet sports betting platform provider must do all of the following: (a) Create an electronic authorized participant file, which must, at a minimum, include the following: (i) The authorized participant’s legal name. (ii) The authorized participant’s date of birth. (iii) The authorized participant’s Social Security number, or the last 4 digits of the Social Security number, or an equivalent identification number for a noncitizen authorized participant, such as a passport or taxpayer identification number. (iv) The authorized participant’s internet sports betting account number or username. (v) The authorized participant’s residential address. A post office box is not acceptable. (vi) The authorized participant’s electronic mail address. (vii) The authorized participant’s telephone number. (viii) Any other information collected from the authorized participant used to verify his or her identity. (ix) The method used to verify the authorized participant’s identity. (x) The date of verification. (b) Encrypt all of the following information contained in an electronic authorized participant file: (i) Any portion of the authorized participant’s Social Security number or equivalent identification number for a noncitizen authorized participant, such as a passport or taxpayer identification number. (ii) The authorized participant’s passwords and PINs. (iii) The authorized participant’s personal financial information. (c) Verify the authorized participant’s age and identity and record the date of verification in accordance with any of the following: (i) Reliable forms of personal identification specified in the sports betting operator’s or internet sports betting platform provider’s internal controls. (ii) Other methodology for remote multi-source authentication, which may include third-party and governmental databases, as approved by the board. (d) Record the document number of the government issued identification credential examined, if applicable. If a government issued identification credential is not required for registration, the electronic record that details the process used to confirm the authorized participant’s identity must be recorded. (e) Require the authorized participant to establish a password or other access security feature as approved by the board and advise the authorized participant to utilize strong authentication login protection. (f) Record the authorized participant’s acceptance of the sports betting operator’s or internet sports betting platform provider’s internet sports betting terms and conditions to participate in internet sports betting through the sports betting operator’s or internet sports betting platform provider’s website. (g) Record the authorized participant’s certification that the information provided to the sports betting operator or internet sports betting platform provider is accurate. (h) Record the authorized participant’s acknowledgment that the legal age for internet sports betting is 21, and that he or she is prohibited from allowing any other individual to access or use his or her internet sports betting account. (i) Notify the authorized participant of the establishment of the account via electronic mail.