Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart L - Interactive Gaming › Chapter 811a - INTERACTIVE GAMING ACCOUNTING AND INTERNAL CONTROLS › Section 811a.2 - Internal controls

Current through Register Vol. 54, No. 28, July 13, 2024
(a) At least 90
				  days prior to commencing interactive gaming under this part, an interactive
				  gaming certificate holder or interactive gaming operator shall submit to the
				  Board for approval internal controls for all aspects of interactive gaming
				  prior to implementation and any time a change is made thereafter. The internal
				  controls must include detailed procedures for system security, operations,
				  accounting, and reporting of compulsive and problem gamblers.
(b) Notwithstanding subsection (a), the
				  procedures and controls may be implemented by an interactive gaming certificate
				  holder or interactive gaming operator upon the filing of the procedures and
				  controls with the Board. Each procedure or control submission must contain
				  narrative and diagrammatic representations of the system to be utilized and
				  must include all of the following:
(1)
				  Procedures for reliable accounting controls, including the standardization of
				  forms and definition of terms to be utilized in the interactive gaming
				  operations.
(2) Procedures, forms
				  and, when appropriate, formulas to govern all of the following:
(i) Calculation of hold
				  percentages.
(ii) Revenue
				  drops.
(iii) Expense and overhead
				  schedules.
(iv) Complimentary
				  services.
(v) Cash-equivalent
				  transactions.
(3) Job
				  descriptions and the system of personnel and chain of command establishing a
				  diversity of responsibility among employees engaged in interactive gaming
				  operations, including employees of an interactive gaming operator, and
				  identifying primary and secondary management and supervisory positions for
				  areas of responsibility, salary structure and personnel practices.
(4) Procedures for the registration of
				  players and establishment of interactive gaming accounts, including a procedure
				  for authenticating the age, identity and physical address of an applicant for
				  an interactive gaming account and whether the applicant is a person prohibited
				  from establishing or maintaining an account under section 13B22 of the act
				  (relating to establishment of interactive gaming accounts).
(5) Procedures for terminating a registered
				  player's interactive gaming account and the return of any funds remaining in
				  the interactive gaming account to the registered player.
(6) Procedures for suspending or terminating
				  a dormant interactive gaming account and the return of any funds remaining in
				  the dormant interactive gaming account to the registered player.
(7) Procedures for the logging in and
				  authentication of a registered player to enable the player to commence
				  interactive gaming and the logging off of the registered player when the player
				  has completed play, including a procedure to automatically log a registered
				  player out of the player's interactive gaming account after a specified period
				  of inactivity.
(8) Procedures for
				  the crediting and debiting of a registered player's interactive gaming
				  account.
(9) Procedures for cashing
				  checks, receiving electronic negotiable instruments, and redeeming chips,
				  tokens or other cash equivalents.
(10) Procedures for withdrawing funds from an
				  interactive gaming account by the registered player.
(11) Procedures for the protection of a
				  registered player's funds, including the segregation of a registered player's
				  funds from operating funds of the interactive gaming certificate holder or
				  interactive gaming operator.
(12)
				  Procedures for recording transactions pertaining to interactive
				  gaming.
(13) Procedures for the
				  security and sharing of personal identifiable information of a registered
				  player, funds in an interactive gaming account and other information as
				  required by the Board. The procedures must include the means by which an
				  interactive gaming certificate holder or interactive gaming operator will
				  provide notice to a registered player related to the sharing of personal
				  identifiable information.
(14)
				  Procedures and security for the calculation and recordation of
				  revenue.
(15) Procedures for the
				  security of interactive gaming devices and associated equipment.
(16) Procedures and security standards as to
				  receipt, handling, and storage of interactive gaming devices and associated
				  equipment.
(17) Procedures and
				  security standards to protect the interactive gaming certificate holder's or
				  interactive gaming operator's interactive gaming skin or interactive gaming web
				  site and interactive gaming devices and associated equipment from hacking or
				  tampering by any person.
(18)
				  Procedures for responding to suspected or actual hacking or tampering with an
				  interactive gaming certificate holder's or interactive gaming operator's
				  interactive gaming skin or interactive gaming web site and interactive gaming
				  devices and associated equipment, including partial or complete suspension of
				  interactive gaming or the suspension of any or all interactive gaming accounts
				  when warranted.
(19) Procedures to
				  verify each registered player's physical location each time a registered player
				  logs into his interactive gaming account and at appropriate intervals
				  thereafter as determined by the Board.
(20) Procedures to ensure that the
				  interactive games are fair and honest and that appropriate measures are in
				  place to deter, detect and, to the extent possible, prevent cheating, including
				  collusion and use of cheating devices, including the use of software programs
				  that make wagers according to algorithms.
(21) Procedures to assist problem and
				  compulsive gamblers, including procedures intended to prevent a person from
				  participating in authorized interactive gaming who is otherwise prohibited from
				  participating in interactive gaming.
(22) Procedures to govern emergencies,
				  including suspected or actual cyber-attacks, hacking or tampering with the
				  interactive gaming certificate holder's interactive gaming skin, interactive
				  gaming platform or interactive gaming web site. The procedures must include the
				  process for the reconciliation or repayment of a registered player's
				  interactive gaming account.