New Jersey Administrative Code › Title 17 - TREASURY - GENERAL › Chapter 20 - RULES OF THE LOTTERY COMMISSION › Subchapter 12 - COURIER SERVICES › Section 17:20-12.11 - General requirements for courier service website, mobile application, and system

Current through Register Vol. 56, No. 14, July 15, 2024
(a) Technologies
				related to courier service customer accounts and ticket sales, including data
				warehouse, redundant/failover system, or backup systems relating to the courier
				service website or mobile application shall be physically located in the United
				States. Any redundant/failover system, or backup systems shall be located on an
				alternative power grid within the United States. Other supporting or ancillary
				technologies are not subject to the requirements of this section.
(b) The courier service system, including
				website and mobile application, shall adhere to cyber security best practices
				for the security of its systems, including the data, servers, and network(s)
				contained within, and shall have sufficient audit logs for purposes of tracking
				activity within the courier service system by both courier service employees
				and courier customers.
(c) The
				courier service system shall at all times deploy a geolocation software system
				that will permit courier customer orders for ticket purchases be made only from
				within the borders of the State of New Jersey. Once logged on, the geolocation
				software shall detect the physical location of the courier customer every 10
				minutes. If the system detects that the physical location of the courier
				customer is in an area unauthorized for ordering tickets, the system shall not
				accept orders for ticket purchases until such time that the courier customer is
				within the borders of New Jersey. Geolocation is not required for creating an
				account, logging into an account, funding an account, or any other action that
				does not involve ordering tickets. The geolocation software that the courier
				deploys must be tested and approved pursuant to N.J.A.C. 17:20-12.14. Such
				testing and approval shall be obtained at the courier's expense. In the event
				that the courier service system is not deploying the geolocation software, the
				courier service system shall suspend all orders for ticket purchases until such
				time the geolocation software is functioning properly.
(d) The courier service shall at all times
				deploy age verification software that will permit logon and purchases to be
				made only by those 18 years of age and older. In the event that the courier
				service system is not deploying the age verification software, the courier
				service system shall suspend all courier services to courier customers until
				such time the age verification software is functioning properly. Any sale of a
				ticket or share to any person under 18 is a disorderly person offense, pursuant
				to the State Lottery Law, and in addition to the consequences for the
				disorderly persons offense, such sale shall also be grounds for suspension,
				revocation, or termination of the courier service. Additionally, the Director
				may impose fines, penalties, and/or a corrective action plan pursuant to
				N.J.A.C.
				17:20-5.1(e), 5.3, and 9, in
				addition to other actions permitted under the law.
(e) A courier service system shall, at a
				minimum, include the following features consistent with its application as
				approved by the Director:
1. The courier
				service applicant must propose a daily courier customer request spend
				limitation of an amount approved by the Director, which may provide that prize
				amounts under $ 600.00 awarded to a courier customer and credited to the
				courier customer's account may be excluded from the daily spend limit. See
				N.J.A.C. 17:20-12.12(k);
2. The
				ability for a courier customer to set a lower personal daily spend
				limit;
3. The ability for a courier
				customer to suspend his or her account or to self-exclude use of his or her
				account for the purchase of tickets;
4. A waiting period, as proposed by the
				courier service and accepted by the Director, before a courier customer can
				raise a previously set personal daily spend limit;
5. A courier customer and ticket management
				system that includes a secure database of all tickets requested through the
				courier service system; and
6. At a
				separate physical location, a secured system or backup system capable of
				continuing business operations/functionality within a reasonable restore time
				in the event of a failure of the courier service's primary system(s) at the
				courier service's primary location in accordance with (a) above.