205 CMR, § 248.03

Current through Register 1533, October 25, 2024

Section 248.03 - Account Registration

(1) Any Person registering for a Sports Wagering Account shall provide Personally Identifiable Information to the Sports Wagering Operator. That information shall include, at a minimum, the following:

(a) Full legal name;

(b) Date of birth;

(c) Physical address of the Person's principal residence, which address shall not be a post office box;

(d) Social Security Number, or the last four digits of the Social Security Number, or an equivalent Federal Identification Number for a noncitizen patron, such as a passport or taxpayer identification number;

(e) A telephone number for the patron; and

(f) Any other information sufficient to verify the registrant's identity and to prove the registrant is at least 21 years old.

(2) During the registration process, the registrant shall:

(a) Not be permitted to register for a Sports Wagering Account if they submit a birth date which indicates that they are younger than 21 years old;

(b) Be informed on the account application which information fields are "required," which are not, and the consequences of not filling in the "required" fields;

(c) Be required to agree to the terms and conditions and privacy policies of the Sports Wagering Operator;

(d) Be required to acknowledge that they are prohibited from allowing any other person to access or use their Sports Wagering Account;

(e) Be required to consent to the monitoring and recording of the use of their Sports Wagering Account by the Sports Wagering Operator and the Commission; and

(f) Be required to affirm that the Personally Identifiable Information provided in accordance with 205 CMR 248.03(1) is accurate.

(3) For each Sports Wagering Account, the Sports Wagering Operator must establish and maintain an electronic patron file, which must, at a minimum, include the following for each patron:

(a) Unique patron ID and, if different from the patron ID, the patron's username;

(b) The information provided in accordance with 205 CMR 248.03(1) to register the patron and create the Sports Wagering Account;

(c) The date and method of identity verification, including, where applicable, the document number of the government issued identification credential examined and its date of expiration, if applicable, or, if a government issued identification credential is not required for registration, the electronic record documenting the process used to confirm the patron's identity;

(d) The date of the patron's agreements to the terms and conditions and privacy policies, including those in 205 CMR 248.06, and the date of the patron's agreement, acknowledgment, consent, and affirmation in accordance with 205 CMR 248.03(2)(c) through (f);

(e) Account details and current balance, including any incentive credits, provided, that all restricted wagering credits and unrestricted funds that may expire shall be maintained separately;

(f) The date on, and method by which, the Sports Wagering Account was registered;

(g) Every date on, time at which, and IP address from which the Sports Wagering Account is accessed;

(h) If the account is active, the debit instrument used to fund the account, the accountholder's name, and whether the debit instrument accountholder's name matches that of the patron, unless impossible; and

(i) The current status of the Sports Wagering Account (e.g., active, dormant, closed, suspended, excluded, etc.).

(4) The following information maintained as part of the electronic patron file shall be stored in encrypted form and protected in accordance with all provisions of 205 CMR regarding data privacy and security:

(a) The patron's social security number, taxpayer identification number, passport number, other government identification number(s), or portion(s) thereof;

(b) The patron's password(s), PIN(s), or other authentication credential(s); and

(c) The patron's debit instrument number(s), debit card number(s), bank account number(s) or other personal financial information.