reglab/statecodes huggingface dataset:
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 808a - INTERACTIVE GAMING PRINCIPALS AND KEY, GAMING AND NONGAMING EMPLOYEES › Section 808a.8 - Loss, theft or destruction of credentials

Current through Register Vol. 54, No. 28, July 13, 2024
(a) As soon as possible, but no later than 24
				  hours following the loss, theft or destruction of a Board credential, emergency
				  credential or temporary credential, the person to whom the credential was
				  issued shall notify the Bureau of Licensing.
(b) The slot machine licensee, interactive
				  gaming certificate holder or interactive gaming operator, on behalf of an
				  employee whose Board-issued credential was lost, stolen or destroyed, may
				  request a replacement Board credential by submitting a Request for Duplicate
				  PGCB Credential Form and the fee established by the Board to the Bureau of
				  Licensing.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 809a - INTERACTIVE GAMING PLATFORM REQUIREMENTS › Section 809a.1 - Scope

Current through Register Vol. 54, No. 28, July 13, 2024
To ensure players are not exposed to unnecessary security
					 risks by choosing to participate in interactive gaming in this Commonwealth and
					 to ensure the integrity and security of interactive gaming operations in this
					 Commonwealth, the system requirements in this chapter apply to all of the
					 following critical components of an interactive gaming system:
(1) Interactive gaming system components
				  which record, store, process, share, transmit or retrieve sensitive player
				  information (for example, credit and debit card details, authentication
				  information and player account balances).
(2) Interactive gaming system components
				  which generate, transmit or process random numbers used to determine the
				  outcome of games or virtual events.
(3) Interactive gaming system components
				  which store results or the current state of a player's wager.
(4) Points of entry and exit from the
				  previously listed systems or other systems which are able to communicate
				  directly with core critical systems.
(5) Communication networks which transmit
				  sensitive player information.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 809a - INTERACTIVE GAMING PLATFORM REQUIREMENTS › Section 809a.2 - Definitions

Current through Register Vol. 54, No. 28, July 13, 2024
The following words and terms, when used in this chapter,
					 have the following meanings, unless the context clearly indicates otherwise:
Domain name system
-The globally
					 distributed Internet database which maps machine names to IP numbers, and vice
					 versa.
Player device
-The device that converts
					 communications from the interactive gaming platform into a human interpretable
					 form and converts human decisions into a communication format understood by the
					 interactive gaming platform. The term includes personal computers, mobile
					 phones, tablets, and the like.
Primary server
-First source for Domain
					 Name System data and responses to queries.
Remote access
-Any access from outside the
					 interactive gaming system or interactive gaming system network, including
					 access from other networks within the same facility.
Secondary server
or
redundancy
					 server
-A server that shares the same features and capabilities as the
					 primary server serves and acts as a second or substitutive point of contact in
					 case the primary server is unavailable, busy or overloaded.
Stateful protocol
-A protocol in which the
					 communication system utilized by the player and the primary or secondary server
					 tracks the state of the communication session.
Stateless protocol
-A protocol in which
					 neither the player nor the primary or secondary servers communication systems
					 tracks the state of the communication session.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 809a - INTERACTIVE GAMING PLATFORM REQUIREMENTS › Section 809a.3 - Location of equipment

Current through Register Vol. 54, No. 28, July 13, 2024
(a) The
				  Board shall approve the location of all interactive gaming devices and
				  associated equipment used by an interactive gaming certificate holder or
				  interactive gaming operator to conduct interactive gaming. The interactive
				  gaming devices and associated equipment may be located in a restricted area on
				  the premises of the licensed facility, in an interactive gaming restricted area
				  within the geographic limits of the county in this Commonwealth where the
				  licensed facility is situated or any other area, located within the United
				  States, provided the location adheres to all of the following limitations:
(1) The primary server used to resolve domain
				  name service inquiries used by an interactive gaming certificate holder or
				  interactive gaming operator to conduct interactive gaming in this Commonwealth
				  must be physically located in a secure data center.
(2) Any redundancy, secondary and emergency
				  servers used by an interactive gaming certificate holder or interactive gaming
				  operator to conduct interactive gaming in this Commonwealth must be physically
				  located in a secure data center at a separate premises than the primary server
				  within the Commonwealth.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 809a - INTERACTIVE GAMING PLATFORM REQUIREMENTS › Section 809a.4 - Physical and environmental controls for equipment

Current through Register Vol. 54, No. 28, July 13, 2024
(a) An interactive gaming system and the
				  associated communications systems must be located in facilities which provide
				  physical protection against damage from fire, flood, hurricane, earthquake, and
				  other forms of natural or manmade disaster by utilizing and implementing at
				  least all of the following measures:
(1)
				  Security perimeters (barriers such as walls, card-controlled entry gates or
				  manned reception desks) must be used to protect areas that contain interactive
				  gaming systems components.
(2)
				  Secure areas must be protected by appropriate entry controls to ensure that
				  access is restricted to only authorized personnel.
(3) All access must be recorded in a secure
				  log which is available for inspection by Board staff.
(4) Secure areas must include an intrusion
				  detection system. Attempts at unauthorized access must be
				  logged.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 809a - INTERACTIVE GAMING PLATFORM REQUIREMENTS › Section 809a.5 - Access to equipment

Current through Register Vol. 54, No. 28, July 13, 2024
(a) The
				  interactive gaming certificate holder and interactive gaming operator shall
				  limit and control access to the primary server and any secondary servers by
				  ensuring all of the following:
(1) Maintain
				  access codes and other computer security controls.
(2) Maintain logs of user access, security
				  incidents and unusual transactions.
(3) Coordinate and develop an education and
				  training program on information security and privacy matters for employees and
				  other authorized users.
(4) Ensure
				  compliance with all State and Federal information security policies and
				  rules.
(5) Prepare and maintain
				  security-related reports and data.
(6) Develop and implement an incident
				  reporting and response system to address security breaches, policy violations
				  and complaints from external parties.
(7) Develop and implement an ongoing risk
				  assessment program that targets information security and privacy matters by
				  identifying methods for vulnerability detection and remediation and overseeing
				  the testing of those methods.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 809a - INTERACTIVE GAMING PLATFORM REQUIREMENTS › Section 809a.6 - System requirements

Current through Register Vol. 54, No. 28, July 13, 2024
(a)
Interactive gaming system methodology
. An interactive gaming
				  system shall be designed with a methodology (for example, cryptographic
				  controls) approved by the Board to ensure secure communications between a
				  player's device and the interactive gaming system. When reviewing the security
				  of an interactive gaming certificate holder or interactive gaming operator's
				  interactive gaming system methodology, the Board will consider all of the
				  following:
(1) The interactive gaming system
				  methodology shall be designed to ensure the integrity and confidentiality of
				  all player communication and ensure the proper identification of the sender and
				  receiver of all communications. If communications are performed across a
				  third-party network, the system must either encrypt the data packets or utilize
				  a secure communications protocol to ensure the integrity and confidentiality of
				  the transmission.
(2) Wireless
				  communications between the player device and the primary or secondary server
				  must be encrypted in transit using a method (for example, AES, IPsec and WPA2)
				  approved by the Board.
(3) All
				  communications that contain registered player account numbers, user
				  identification, or passwords and PINs must utilize a secure method of transfer
				  (for example, 128-bit key encryption) approved by the Board.
(4) Only devices authorized by the Board are
				  permitted to establish communications between a player device and an
				  interactive gaming system.
(5)
				  Server-based interactive gaming systems must maintain an internal clock that
				  reflects the current date and time that must be used to synchronize the time
				  and date among all components that comprise the interactive gaming system. The
				  interactive gaming system date and time must be visible to the registered
				  player when logged on.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 809a - INTERACTIVE GAMING PLATFORM REQUIREMENTS › Section 809a.7 - Geolocation requirements

Current through Register Vol. 54, No. 28, July 13, 2024
(a) An
				  interactive gaming system must employ a mechanism to detect the physical
				  location of a player upon logging into the interactive gaming system and as
				  frequently as specified in the Board's technical standards and the interactive
				  gaming certificate holder's or interactive gaming operator's approved internal
				  controls submission. If the system detects that the physical location of the
				  player is in an area unauthorized for an interactive gaming system, the system
				  shall not accept wagers and must disable any interactive gaming activity for
				  that player until the player is in an authorized location.
(b) The geolocation system must be equipped
				  to dynamically monitor the player's location and block unauthorized attempts to
				  access the interactive gaming system throughout the duration of the gaming
				  session.
(c) An interactive gaming
				  certificate holder or interactive gaming operator must prevent registered
				  players within a licensed facility from accessing authorized interactive games
				  on the registered player's own computers or other devices through the use of
				  geolocation technologies.
(d)
				  Interactive gaming shall only occur within this Commonwealth unless the conduct
				  of gaming is not inconsistent with Federal law, law of the jurisdiction,
				  including any foreign nation, in which the participating player is located, or
				  the gaming activity is conducted pursuant to a reciprocal agreement to which
				  the Commonwealth is a party that is not inconsistent with Federal
				  law.
This section cited in 58 Pa. Code §
												830a.7 (relating to multiuse
						computing device and gaming platform
						requirements).
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 809a - INTERACTIVE GAMING PLATFORM REQUIREMENTS › Section 809a.8 - Security policy requirements

Current through Register Vol. 54, No. 28, July 13, 2024
Interactive gaming certificate holders and interactive
					 gaming operators shall adopt and maintain a Board-approved information security
					 policy which describes the certificate holder's or licensee's approach to
					 managing information security and its implementation. This policy is required
					 in addition to any similar requirements that may be imposed as part of the
					 certificate holder's or licensee's internal controls. The information security
					 policy must:
(1) Conform to the
				  standards of the most recent version of the NIST cybersecurity
				  framework.
(2) Be reviewed annually
				  as well as when significant changes occur to the interactive gaming system or
				  the processes which alter the risk profile of the interactive gaming
				  system.
(3) Be approved annually by
				  the certificate holder's or operator's management.
(4) Be communicated to all employees and
				  relevant external parties.
(5)
				  Delineate the responsibilities of the certificate- holder's or licensee's staff
				  and the staff of any third parties for the operation, service and maintenance
				  of the interactive gaming system and its components.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.1 - Scope

Current through Register Vol. 54, No. 28, July 13, 2024
To ensure players are not exposed to unnecessary security
					 risks by choosing to participate in interactive gaming in this Commonwealth and
					 to ensure the integrity and security of interactive gaming operations in this
					 Commonwealth, this chapter applies to all games an interactive gaming
					 certificate holder or interactive gaming operator seeks to offer to players in
					 this Commonwealth.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.2 - Definitions

Current through Register Vol. 54, No. 28, July 13, 2024
The following words and terms, when used in this chapter,
					 have the following meanings, unless the context clearly indicates
					 otherwise:
Artwork
or
art
-Graphical and auditory information that is sent to the player device for
					 presentation to the player.
Game cycle
-The finite set of all possible
					 combinations.
Personal progressive
-A progressive jackpot
					 which only one player contributes to with qualifying progressive wagers and
					 which only that player can win.
Player interface
-The interface within the
					 software in which the player interacts. The term is also referred to as the
					 gaming window.
Progressive jackpot
-
(i) An increasing prize based on a function
				  of credits that are wagered.
(ii) A
				  monetary prize that increases in value based on a function of credits
				  wagered.
(iii) The term includes
				  prizes that are awarded based on criteria other than obtaining winning outcomes
				  in the game, such as mystery progressives.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.4 - Minimum display standards

Current through Register Vol. 54, No. 28, July 13, 2024
All of the following game information must be visible or
					 easily accessible to the player at all times during a player session:
(1) The name of the game being
				  played.
(2) Restrictions on play or
				  betting such as any play duration limits, maximum win values, and the
				  like.
(3) The player's current
				  session balance.
(4) The current
				  bet amount. This is only during the phase of the game when the player can add
				  to or place additional bets for that phase.
(5) Current placement of all bets.
(6) The denomination of the bet.
(7) The amount won for the last completed
				  game (until the next game starts or betting options are modified).
(8) The player options selected for the last
				  completed game (until the next game starts or a new selection is
				  made).
(9) Initial player section
				  options are to be described. Player selection options once the game has
				  commenced should be clearly shown on the screen.
(10) The winning amount for each separate
				  wager and total winning amount are to be displayed on the screen.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.5 - Random number generator standards

Current through Register Vol. 54, No. 28, July 13, 2024
(a)
				  The random number generator must be cryptographically strong at the time of
				  submission for approval. When more than one instance of a random number
				  generator is used in an interactive gaming system, each instance must be
				  separately evaluated and certified. When each instance is identical but
				  involves a different implementation within a game/application, each
				  implementation shall also be separately evaluated and certified. Any outcomes
				  from the random number generator used for game symbol selection/game outcome
				  determination must be shown, by data analysis and a source code read, to:
(1) Be statistically independent, unless the
				  submission has been approved for a persistent-state outcome
				  determination.
(2) Be fairly
				  distributed (within statistically expected bounds) over their range.
(3) Pass various recognized statistical
				  tests.
(4) Be cryptographically
				  strong.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.6 - Software authentication

Current through Register Vol. 54, No. 28, July 13, 2024
The acquisition and development of new software must follow
					 defined processes in accordance with the information security policy.
(1) The production environment must be
				  logically and physically separated from the development and test
				  environments.
(2) Development staff
				  shall be precluded from having access to promote code changes into the
				  production environment. If, due to staffing limitations, this requirement
				  cannot be met by the entity, the internal controls submitted to the Board shall
				  describe what measures will be implemented to ensure the integrity of
				  interactive games in the production environment.
(3) There must be a documented method to
				  verify that test software is not deployed to the production
				  environment.
(4) To prevent leakage
				  of personal identifiable information, there must be a documented method to
				  ensure that raw production data is not used in testing.
(5) All documentation relating to software
				  and application development should be available and retained for the duration
				  of its lifecycle.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.7 - Changes to game

Current through Register Vol. 54, No. 28, July 13, 2024
A change or modification to an interactive game shall be
					 handled in accordance with the Change Management guidelines issued and
					 distributed to interactive gaming certificate holders, interactive gaming
					 operators and interactive gaming manufacturers.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.8 - Game rules

Current through Register Vol. 54, No. 28, July 13, 2024
(a) Interactive
				  gaming certificate holders and interactive gaming operators shall adopt and
				  adhere to written, comprehensive house rules governing wagering transactions by
				  and between authorized players that are available for review at all times by
				  players through a conspicuously displayed link. House rules must include all of
				  the following:
(1) Clear and concise
				  explanation of all fees.
(2) The
				  rules of play of a game.
(3) Any
				  monetary wagering limits.
(4) Any
				  time limits pertaining to the play of a game.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.9 - Fairness

Current through Register Vol. 54, No. 28, July 13, 2024
(a) All critical
				  functions including the generation of the result of any game (and the return to
				  the player) must be generated by the interactive gaming platform and be
				  independent of the player device. All of the following also apply:
(1) Game outcome may not be affected by the
				  effective bandwidth, link utilization, bit error rate or other characteristic
				  of the communications channel between the interactive gaming platform and the
				  player device.
(2) Determination of
				  events of chance that result in a monetary award may not be influenced,
				  affected or controlled by anything other than numerical values derived in an
				  approved manner from the certified random number generator when applicable and
				  in conjunction with the rules of the game.
(3) Each possible permutation or combination
				  of game elements that produces winning or losing game outcomes must be
				  available for random selection at the initiation of each play, unless otherwise
				  denoted by the game.
(4) As game
				  symbols are selected or game outcomes are determined, they must be immediately
				  used as directed by the rules of the game.
(5) When the game requires a sequence or
				  mapping of symbols or outcomes to be set up in advance, the symbols or outcomes
				  should not be resequenced or remapped, except as provided for in the rules of
				  the game.
(6) After selection of
				  the game outcome, the game may not make a variable secondary decision which
				  affects the result shown to the player.
(7) Except as provided by the rules of the
				  game, events of chance within games should be independent and not correlated
				  with any other events within the game or events within the previous game,
				  unless the submission has been approved for a persistent-state outcome
				  determination.
(8) For game types
				  such as a spinning reel game, unless otherwise disclosed to the player, the
				  mathematical probability of a symbol appearing in a position for any game
				  outcome must be constant.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.10 - Prohibitions

Current through Register Vol. 54, No. 28, July 13, 2024
(a)
Forced
				  game play
.
(1) The player may not be
				  forced to play a game just by selecting that game.
(2) It must not be possible to start a new
				  game in the same player interface instance before all relevant meters have been
				  updated on the interactive game system and all other relevant connections and
				  player session balance or, if applicable, the player's total balance has been
				  updated.
(3) If an auto play mode
				  is incorporated, it must be possible to turn this mode off at any time during
				  game play.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.11 - Controls

Current through Register Vol. 54, No. 28, July 13, 2024
(a) A replay last
				  game feature either as a re-enactment or by description must be available to
				  players. The replay must clearly indicate that it is a replay of the entire
				  previous game cycle, and must provide, at a minimum, all of the following
				  information:
(1) The date and time the game
				  started or ended, or both.
(2) The
				  display associated with the final outcome of the game, either graphically or by
				  a clear text message.
(3) Total
				  player cash/credits at start or end of play, or both.
(4) Total amount bet.
(5) Total cash/credits won for the prize
				  (including progressive jackpots).
(6) The results of any player choices
				  involved in the game outcome.
(7)
				  Results of any intermediate game phases, such as gambles or feature
				  games.
(8) Amount of any
				  promotional awards received, if applicable.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 810a - INTERACTIVE GAMING TESTING AND CONTROLS › Section 810a.12 - Test accounts

Current through Register Vol. 54, No. 28, July 13, 2024
(a) Interactive
				  gaming certificate holders and interactive gaming operators may establish test
				  accounts to be used to test the various components and operation of an
				  interactive gaming system in accordance with internal controls, which, at a
				  minimum, address all of the following:
(1) The
				  procedures for the issuance of funds used for testing, including the
				  identification of who is authorized to issue the funds and the maximum amount
				  of funds that may be issued.
(2)
				  The procedures for assigning each test account for use by only one
				  person.
(3) The maintenance of a
				  record for all test accounts to include when they are active, to whom they are
				  issued and the employer of the person to whom they are issued.
(4) The procedures for the auditing of
				  testing activity by the interactive gaming certificate holder or interactive
				  gaming operator to ensure the accountability of funds used for testing and
				  proper adjustments to gross interactive gaming revenue.
(5) The ability to withdraw funds from a test
				  account without the Board's prior approval must be disabled by the interactive
				  gaming system.
(6) For testing of
				  peer-to-peer games:
(i) A person may utilize
				  multiple test accounts.
(ii) Test
				  account play shall be conducted without the participation of players.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 811a - INTERACTIVE GAMING ACCOUNTING AND INTERNAL CONTROLS › Section 811a.1 - Scope

Current through Register Vol. 54, No. 28, July 13, 2024
To ensure the integrity and security of interactive gaming
					 operations in this Commonwealth, this chapter applies to all interactive gaming
					 certificate holders or interactive gaming operators seeking to offer
					 interactive gaming to registered players in this
					 Commonwealth.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 811a - INTERACTIVE GAMING ACCOUNTING AND INTERNAL CONTROLS › Section 811a.4 - Information to be displayed on web site

Current through Register Vol. 54, No. 28, July 13, 2024
Interactive gaming certificate holders and interactive
					 gaming operators shall provide for the prominent display of all of the
					 following information on a page which, by virtue of the construction of the web
					 site, authorized players must access before beginning a gambling session:
(1) The full name of the interactive
				  gaming certificate holder or interactive gaming operator and address from which
				  it carries on business.
(2) A logo,
				  to be provided by the Board, indicating that the interactive gaming certificate
				  holder or interactive gaming operator on behalf of the interactive gaming
				  certificate holder is authorized to operate interactive gaming in this
				  Commonwealth.
(3) The interactive
				  gaming certificate holders and interactive gaming operator's license
				  number.
(4) A statement that
				  persons under 21 years of age are not permitted to engage in interactive
				  gaming.
(5) A statement that
				  persons located in a jurisdiction where interactive gaming is not legal are not
				  permitted to engage in interactive gaming.
(6) Active links to all of the following:
(i) Information explaining how disputes are
				  resolved.
(ii) A problem gambling
				  web site that is designed to offer information pertaining to responsible
				  gaming.
(iii) The Board's web
				  site.
(iv) A web site that allows
				  for an authorized player to choose to be excluded from engaging in interactive
				  gaming.
(v) A link to the house
				  rules adopted by the interactive gaming certificate holder or interactive
				  gaming operator.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 811a - INTERACTIVE GAMING ACCOUNTING AND INTERNAL CONTROLS › Section 811a.5 - Segregation of bank accounts and reserve requirements

Current through Register Vol. 54, No. 28, July 13, 2024
(a) An interactive gaming certificate holder
				  or interactive gaming operator shall maintain a bank account for player's funds
				  separate from all other operating accounts to ensure the security of funds held
				  in the player's interactive gaming accounts.
(b) The balance maintained in this account
				  must be greater than or equal to the sum of the daily ending cashable balance
				  of all player interactive gaming accounts, funds on game and pending
				  withdrawals.
(c) An interactive
				  gaming certificate holder or interactive gaming operator shall have unfettered
				  access to all player interactive gaming account and transaction data to ensure
				  the amount held in its independent account is sufficient. An interactive gaming
				  certificate holder's or interactive gaming operator's chief financial officer
				  shall file a quarterly attestation with the Board, unless otherwise directed by
				  the Board, that the funds have been safeguarded under this section.
This section cited in 58 Pa. Code §
												811a.9 (relating to required
						reports; reconciliation).
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 811a - INTERACTIVE GAMING ACCOUNTING AND INTERNAL CONTROLS › Section 811a.6 - Interactive gaming certificate holder's or interactive gaming operator's organization

Current through Register Vol. 54, No. 28, July 13, 2024
(a) An
				  interactive gaming certificate holder's or interactive gaming operator's
				  systems of internal controls must include organization charts depicting
				  segregation of functions and responsibilities and descriptions of the duties
				  and responsibilities for each position shown on each organization chart.
				  Interactive gaming certificate holders and interactive gaming operators are
				  permitted, except as otherwise provided in this section, to tailor
				  organizational structures to meet the needs or policies of a particular
				  management philosophy. An interactive gaming certificate holder's and
				  interactive gaming operator's organization charts must provide for all of the
				  following:
(1) A system of personnel and chain
				  of command which permits management and supervisory personnel to be held
				  accountable for actions or omissions within their areas of
				  responsibility.
(2) The segregation
				  of incompatible functions, duties and responsibilities so that an employee is
				  not in a position to commit an error and perpetrate a fraud and to conceal the
				  error or fraud in the normal course of the employee's duties.
(3) The performance of all functions, duties
				  and responsibilities in accordance with sound financial practices by qualified
				  personnel.
(4) The areas of
				  responsibility which are not so extensive as to be impractical for an
				  individual to monitor.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 811a - INTERACTIVE GAMING ACCOUNTING AND INTERNAL CONTROLS › Section 811a.7 - Mandatory interactive gaming system logging

Current through Register Vol. 54, No. 28, July 13, 2024
(a) An interactive gaming system must employ
				  a mechanism capable of maintaining a separate copy of the information required
				  to be logged under this chapter on a separate and independent logging device
				  capable of being administered by an employee with no incompatible function. If
				  the interactive gaming system can be configured so that any logged data is in a
				  secure transaction file, a separate logging device is not required.
(b) An interactive gaming system must provide
				  a mechanism for the Board to query and export, in a format required by the
				  Board, all gaming system data.
(c)
				  An interactive gaming system must electronically log the date and time any
				  interactive gaming account is created or terminated (Account Creation
				  Log).
(d) An interactive gaming
				  system must maintain all information necessary to recreate player game play and
				  account activity during each player session, including any identity or location
				  verifications, for no less than 10 years.
(e) Unless otherwise authorized by the Board,
				  when software is installed on or removed from an interactive gaming system, the
				  action must be recorded in a secure electronic log (Software
				  Installation/Removal Log), which must include all of the following:
(1) The date and time of the
				  action.
(2) The identification of
				  the software.
(3) The identity of
				  the person performing the action.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 811a - INTERACTIVE GAMING ACCOUNTING AND INTERNAL CONTROLS › Section 811a.8 - Records/data retention requirements

Current through Register Vol. 54, No. 28, July 13, 2024
(a) For the purposes of this section, "books,
				  records and documents" means any book, record or document pertaining to,
				  prepared in or generated by the operation of the interactive gaming certificate
				  holder or interactive gaming operator including all forms, reports, accounting
				  records, ledgers, subsidiary records, computer generated data, internal audit
				  records, correspondence and personnel records required to be generated and
				  maintained under this part. This definition applies without regard to the
				  medium through which the record is generated or maintained (for example, paper,
				  magnetic media or encoded disk).
(b) Original books, records and documents
				  pertaining to the operation of interactive gaming must be:
(1) Prepared and maintained in a complete,
				  accurate and legible form. Electronic data must be stored in a format that
				  ensures readability, regardless of whether the technology or software that
				  created or maintained it has become obsolete.
(2) Retained in a secure location by the
				  interactive gaming certificate holder or interactive gaming operator that is
				  equipped with a fire suppression system or at another location approved under
				  subsection (d).
(3) Made available
				  for inspection by agents of the Board, the Department and the Pennsylvania
				  State Police during all hours of operation.
(4) Organized and indexed in a manner to
				  provide immediate accessibility to agents of the Board, the Department and the
				  Pennsylvania State Police.
(5)
				  Destroyed only after expiration of the minimum retention period specified in
				  subsection (c), except that the Board may, upon the written request of an
				  interactive gaming certificate holder or interactive gaming operator and for
				  good cause shown, permit the destruction at an earlier date.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 811a - INTERACTIVE GAMING ACCOUNTING AND INTERNAL CONTROLS › Section 811a.9 - Required reports; reconciliation

Current through Register Vol. 54, No. 28, July 13, 2024
(a) An interactive gaming system shall be
				  designed to generate reports as specified by the Board that must include, at a
				  minimum, all of the following:
(1) The report
				  title.
(2) The version number of
				  the current system software and report definition.
(3) The date or time period of activity, or
				  description as of a point in time.
(4) The date and time the report was
				  generated.
(5) Page numbering,
				  indicating the current page and total number of pages.
(6) Subtotals and grand totals as required by
				  the Department.
(7) A description
				  of any filters applied to the data presented in the document.
(8) Column and row titles, if
				  applicable.
(9) The name of the
				  interactive gaming certificate- holder or interactive gaming
				  operator.
(10) A reconciliation of
				  all relevant data contained therein, if applicable.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 812a - INTERACTIVE GAMING PLAYER ACCOUNTS › Section 812a.1 - Definitions

Current through Register Vol. 54, No. 28, July 13, 2024
The following words and terms, when used in this chapter,
					 have the following meanings, unless the context clearly indicates
					 otherwise:
Electronic identifier
-A unique
					 identifier, such as a username or account number, other than personal
					 identifying information (for example, a Social Security number), used to
					 identify a player.
Player session
-A player session consists
					 of all activities and communications performed by an authorized registered
					 player and the interactive gaming system between the time the registered player
					 logs in to the interactive gaming system and the time the registered player
					 logs out or is logged out of the interactive gaming system.
Strong authentication
-A method that is
					 intrinsically stringent enough to ensure the security of the system it protects
					 by withstanding any attacks it is likely to encounter by combining at least two
					 mutually-independent factors so that the compromise of one method should not
					 lead to the compromise of the second and includes one nonreusable element,
					 which cannot easily be reproduced or stolen from the Internet, to verify the
					 identity of a registered player.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 812a - INTERACTIVE GAMING PLAYER ACCOUNTS › Section 812a.2 - Player account registration

Current through Register Vol. 54, No. 28, July 13, 2024
(a) Prior
				  to engaging in interactive gaming, a player shall establish an interactive
				  gaming account.
(b) To establish an
				  interactive gaming account, the player shall provide all of the following
				  information:
(1) The player's legal
				  name.
(2) The player's date of
				  birth.
(3) The entire or last four
				  digits of the player's Social Security number, if voluntarily provided, or
				  equivalent for a foreign player such as a passport or taxpayer identification
				  number.
(4) The player's
				  address.
(5) The player's e-mail
				  address.
(6) The player's telephone
				  number.
(7) Any other information
				  collected from the player to verify his identity.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 812a - INTERACTIVE GAMING PLAYER ACCOUNTS › Section 812a.3 - Account security

Current through Register Vol. 54, No. 28, July 13, 2024
(a) An
				  interactive gaming system must utilize sufficient security to ensure player
				  access is appropriately limited to the registered account holder. Unless
				  otherwise authorized by the Board, security measures must include, at a
				  minimum, all of the following:
(1) A
				  username.
(2) A password of
				  sufficient length and complexity to ensure its effectiveness.
(3) Upon account creation, the option for
				  users to choose strong authentication login protection.
(4) When a player logs into his registered
				  interactive gaming account, the system must display the date and time of the
				  player's previous log on.
(5) An
				  option to permit a player to elect to receive an electronic notification to the
				  player's registered e-mail address, cellular phone or other device each time an
				  interactive gaming account is accessed.
(6) The interactive gaming system must
				  require a player to re-enter his username and password after 15 minutes of user
				  inactivity.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 812a - INTERACTIVE GAMING PLAYER ACCOUNTS › Section 812a.4 - Single account requirement

Current through Register Vol. 54, No. 28, July 13, 2024
(a) A
				  player shall have only one interactive gaming account for each interactive
				  gaming certificate holder or interactive gaming operator. Each interactive
				  gaming account must be nontransferable, unique to the player who establishes
				  the account, and distinct from any other account number that the player may
				  have established with the interactive gaming certificate holder or interactive
				  gaming operator for noninteractive gaming activity.
(b) Each registered player account shall be
				  treated independently and players may not be permitted to transfer funds
				  between accounts held with different interactive gaming certificate holders or
				  interactive gaming operators. Registered players are prohibited from
				  transferring funds to an account held by another player.
(c) To ensure compliance with this subpart,
				  interactive gaming certificate holders and interactive gaming operators shall:
(1) Record and maintain the physical location
				  of the registered player while logged in to the interactive gaming
				  account.
(2) Ensure that a
				  registered player does not occupy more than one position at a game at any given
				  time unless otherwise approved by the Board to permit a registered player to
				  occupy more than one position at a game at any given time.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 812a - INTERACTIVE GAMING PLAYER ACCOUNTS › Section 812a.5 - Account terms and conditions disclosures

Current through Register Vol. 54, No. 28, July 13, 2024
(a) During the registration process the
				  player shall agree to the terms and conditions which govern the relationship
				  between the interactive gaming certificate holder or interactive gaming
				  operator and the player. The terms and conditions must include a privacy policy
				  which governs the protection and use of the player's data.
(b) The terms and conditions provided to
				  players by interactive gaming certificate holders and interactive gaming
				  operators shall be submitted to the Bureau of Gaming Operations for review. The
				  terms and conditions must contain, at minimum, all of the following:
(1) The name and address of the interactive
				  gaming certificate holder or interactive gaming operator.
(2) A statement that the interactive gaming
				  certificate holder or interactive gaming operator is licensed and regulated by
				  the Board for the purposes of operating and offering interactive gaming
				  services in this Commonwealth.
(3)
				  A requirement that the player acknowledges that he has read the terms and
				  conditions and agrees to be bound by them.
(4) A requirement that the player will comply
				  with all applicable laws, statutes and regulations.
(5) A statement that no individual under 21
				  years of age may participate in interactive gaming and that it is a criminal
				  offense to allow a person who is not legally of age to participate in
				  interactive gaming in this Commonwealth.
(6) A statement that the player consents to
				  verification of registration information including name, address, date of
				  birth, Social Security number, passport identification (for non-United States
				  residents) and any other identification information required to confirm age and
				  identity.
(7) A statement that the
				  player consents to verification of his location for the duration of play of
				  interactive games.
(8) A statement
				  that players have the right to set responsible gaming limits and to
				  self-exclude from interactive gaming.
(9) A dispute resolution policy including
				  notifying players of their right to file a complaint with the Board.
(10) A player disconnection policy.
(11) Any other information that may be
				  required by the Board.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 812a - INTERACTIVE GAMING PLAYER ACCOUNTS › Section 812a.6 - Self-exclusion list

Current through Register Vol. 54, No. 28, July 13, 2024
(a) All interactive
				  gaming certificate holders and interactive gaming operators shall have a link
				  on its interactive gaming web site to the self-exclusion page of the Board web
				  site.
(b) Any player seeking to
				  self-exclude from interactive gaming shall follow the procedures in the Board's
				  regulations.
Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 812a - INTERACTIVE GAMING PLAYER ACCOUNTS › Section 812a.7 - Player funding of accounts

Current through Register Vol. 54, No. 28, July 13, 2024
(a) A
				  player's interactive gaming account may be funded through the use of all of the
				  following:
(1) Cash deposits made directly
				  with the interactive gaming certificate holder or interactive gaming
				  operator.
(2) Personal checks,
				  cashier's checks, wire transfer and money order deposits made directly or
				  mailed to the interactive gaming certificate holder or interactive gaming
				  operator.
(3) A player's credit
				  card or debit card, including prepaid cards.
(4) A player's deposit of cash, gaming
				  vouchers or gaming chips at a cashiering location approved by the
				  Board.
(5) A player's reloadable
				  prepaid card, which has been verified as being issued to the player and is
				  nontransferable.
(6) Cash
				  complimentaries, promotional credits or bonus credits.
(7) Winnings.
(8) Automated clearing house (ACH) transfer,
				  provided that the interactive gaming certificate holder or interactive gaming
				  operator has security measures and controls to prevent ACH fraud. A failed ACH
				  deposit attempt may not be considered fraudulent if the player has successfully
				  deposited funds through an ACH transfer on a previous occasion with no
				  outstanding chargebacks. If the interactive gaming certificate holder or
				  interactive gaming operator suspects fraud after multiple failed ACH deposit
				  attempts, the interactive gaming certificate holder or interactive gaming
				  operator may temporarily freeze or suspend the player's account to investigate
				  and, if the interactive gaming certificate holder or interactive gaming
				  operator determines that fraud has occurred, suspend the player's
				  account.
(9) Adjustments made by
				  the interactive gaming certificate holder or interactive gaming operator
				  following the resolution of disputes provided there is documented notification
				  to the player.
(10) Any other means
				  as approved by the Board.