Section 1900.1430  Internet Wagering System Requirements

a)         A master sports wagering licensee conducting sports wagering over the internet shall use an internet wagering system, all the integral components of which have been tested and certified pursuant to Section 1900.1410.

b)         An internet wagering system shall employ a mechanism to detect the physical location of a patron upon logging into the client, or prior to placement of the first wager after logging in, and at a frequency to be specified in the master sports wagering licensee's internal control system.

c)         An internet wagering system must have methods to detect and prevent efforts to defeat or circumvent the location detection mechanisms.

d)         An internet wagering system shall not permit placement of wagers if it detects attempts to defeat or circumvent the location detection mechanisms.

e)         Client software shall not engage in any other data collection other than that necessary for compliance with the Act and this Part, without the express approval of the Administrator.

f)         Any data collected by the internet wagering system shall be considered confidential and shall not be disclosed except in accordance with this Part.

g)         Data collected by client software shall not be used for any purpose other than compliance with the Act and this Part, and shall not be disclosed to any third party other than the Board, a licensed supplier of any component of the internet wagering system that collected the data, or a management services provider licensee acting as the designee of the master sports wagering licensee that collected the data, unless:

1)         Approved by the Administrator when the Administrator concludes that doing so would further the public interests of the people of the State of Illinois; or

2)         As required pursuant to Section 1900.130.

h)         Any data disclosed pursuant to this Part shall not include personally identifying information of wagering patrons unless deemed necessary for law enforcement or investigative purposes by the Administrator.  The determination shall be in writing.

i)          Each master sports wagering licensee shall maintain modern best practices to ensure the security and integrity of the internet wagering system, including but not limited to:

1)         Network security;

2)         Patron identity authentication;

3)         Location detection;

4)         Error detection; and

5)         Data security.

j)          If a master sports wagering licensee becomes aware of a reproducible error in the internet wagering system that relates to network security, data security, location detection, or otherwise calls into question the security and integrity of the internet wagering system, the licensee shall notify the Board immediately.  The notification shall include:

1)         A description of the error;

2)         Risks created or imposed by the error; and

3)         Efforts being taken by the master sports wagering licensee to prevent any impact to the security and integrity of the internet wagering system or sports wagering system.