24 NCAC 06A .0701 Wagering Account Requirements

(a) The Operator shall adopt Internal Controls related to Account registration. An Individual shall have an established Wagering Account with the Operator to participate in Wagering over the Internet. Nothing in this Rule shall be interpreted to prohibit the Operator from accepting anonymous Wagers by a Wagering Kiosk or Ticket Writer Station within the Wagering Facility.

(b) A Wagering Account shall only be established in the name of a Registered Player who is a natural person and may not be in the name of a beneficiary, custodian, joint trust, corporation, partnership, or another entity.

(1) the Player's full legal name;

(2) the Player's date of birth;

(3) the Player's principal residential address, a post office box is not acceptable;

(4) the Player's Social Security number, or the last four digits of the Social Security number, or an equivalent government identification number for a noncitizen, for example, a passport or taxpayer identification number; and

(5) other information collected from the Player used to verify their identity and to prove the Player is not an Ineligible Person.

(d) During the Wagering Account registration process, the Player shall:

(1) be denied the ability to register for an Account if they submit a birth date which indicates that they are an Underage Person;

(2) if not all fields are "required," be informed on the Account application which information fields are "required," which are not, and what will be the consequences of not filling in the required fields;

(3) agree to the terms and conditions and privacy policies of the Operator, which shall comply with applicable law, including, but not limited to, G.S. 18C-910(i);

(4) consent to the monitoring and recording of the use of their Account by the Operator and the Commission;

(5) affirm that:

(A) the Player meets eligibility requirements for registration; and

(B) the Personal Information the Player is providing to open the Account is accurate; and

(6) authorize the provision of notices and other required communications either through a designated mobile or other interface or to an electronic mail address designated by the Player.

(e) An Operator shall maintain an electronic Player file, which shall include the following for Wagering Accounts, as applicable:

(1) the unique Wagering Account ID and username, if different;

(2) the information indicated in Paragraph (c) of this Rule to register a Player and create the Account;

(3) the date and method of identity verification, including, where applicable, the document number of the government issued identification credential examined and its date of expiration, if applicable. If a government issued identification credential is not required for registration, the electronic record that details the process used to confirm the Player's identity shall be recorded;

(4) the date of Player agreement to the terms and conditions and privacy policies;

(5) previous Wagering Accounts and reason for de-activation;

(6) the date and method from which the Wagering Account was registered;

(7) the date and time a Wagering Account is accessed by an Individual, including IP address;

(8) a history of financial transactions, including deposits, withdrawals, and Account adjustments;

(9) Account details and current balance, including restricted Wagering credits and unrestricted funds. Restricted Wagering credits and unrestricted funds that have a possible expiration shall be maintained separately; and

(10) the current status of the Wagering Account.

(f) The following information maintained as part of the electronic Player file shall be encrypted or hashed to other cryptographic algorithms as allowed by the Director:

(1) the Registered Player's government identification number, or portions thereof;

(2) the Registered Player's previous and current passwords, pins, or other authentication credentials, including biometric information; and

(3) the Registered Player's previous and current debit instrument numbers, debit card numbers, bank account numbers or other personal financial information.

(g) An Operator may allow the Registered Player to update authentication credentials, registration information and the account used for financial transactions. A Multi-Factor Authentication process shall be used for these purposes.

History Note: Authority G.S. 18C-114(a)(14);

Previously adopted as Rule 1G-001;

Eff. January 8, 2024;

Readopted Eff. March 27, 2024;

Amended Eff. June 22, 2024.