Minimum Internal Control Standards For Cashless Wagering Systems

Minimum Internal Control Standards For Cashless Wagering Systems. (a) A licensee may utilize a cashless wagering system that has been tested and approved by the Commission pursuant to Part 4, Rules 2.3 and 2.10 of these regulations. (b) Prior to utilizing a cashless wagering system, a licensee shall establish internal controls for the operation of the cashless wagering system. The internal controls shall be submitted to and approved by the Commission pursuant to Part 4, Rules 2.3 and 2.10 of these regulations. The internal control procedures must address the integrity, security, and control of the cashless wagering system and include: 1. A comprehensive overview of the system design; 2. Access and security controls to ensure patron access is limited to the registered account holder; 3. Methods and procedures for: i. Funding a digital wallet, including funding sources; ii. Withdrawing funds from a digital wallet; iii. Transferring digital funds to a slot machine; iv. Withdrawing digital funds from a slot machine; v. Transferring digital funds to a table game; and vi. Redemption of table game chips to a digital wallet; 4. Any limits the licensee will place on cashless wagering accounts and transactions; 5. Logical and physical access controls and restrictions, including; i. Which personnel will have discretionary authority over the cashless wagering system, including non- gaming personnel; and ii. How personnel interaction with the system will be monitored and logged; 6. Network security, including encryption methodology; 7. Backup, recovery, and redemption procedures in the event the cashless wagering system becomes inoperable; 8. Procedures for handling customer disputes; 9. Detailed revenue audit procedures; and 10. Provisions for responsible gaming. (c) Any amendment to a licensee’s internal controls must be submitted to and approved by the Commission prior to the implementation of any changes.