24 NCAC 06A .0702         Age and Identity Verification

(a)  The Operator shall put in place and utilize sufficient measures to verify the age and identity of the Registered Player that is necessary for the remote, electronic establishment of Wagering Accounts.

(b)  The Operator is responsible for ensuring that only eligible Persons may create a Wagering Account, deposit funds, or participate in Sports Wagering or Pari-Mutuel Wagering through such Account. The Operator shall deny the ability to create a Wagering Account, deposit funds, or participate in Sports Wagering or Pari-Mutuel Wagering to an Ineligible Person. This Rule shall not be construed to prevent an Individual from creating a Wagering Account and depositing funds to an Account even if they are prohibited from placing certain wagers.

(c)  At the time of Account establishment, the Operator shall use electronic verification using one or more secure online databases, which government or business regularly use to verify and authenticate age and identity, or by examination of government-issued photo identification, or similar identified in the Operator's Internal Controls, and the review of a supplemental, contemporaneous photograph of the Person to verify the Player's name, date of birth, and government identification number, or portions thereof.

(d)  The following data shall be verified as an exact match before Players may initiate deposits, withdrawals and Wagering:

(1)           the Player's last name;

(2)           the Player's date of birth; and

(3)           the Player's government identification number or credential, or portions thereof.

(e)  Operators shall ensure that reasonable measures to ensure the Person providing the identity information is truly the owner of the identity and that all identity information provided is accurate before a Player may initiate deposits, withdrawals, or Wagering. One of the following options is required:

(1)           correctly answer three dynamic knowledge-based questions compiled from public and private data including public records, credit reports, marketing data, and other recorded facts;

(2)           verification that the Player's phone number and email address match the information provided by the Player;

(3)           valid government issued identification credential;

(4)           verification that the Player's device is associated with the user via historical location data and mobile phone identity authentication, or Multi-Factor Authentication; or

(5)           other methods approved by the Commission or Director.

(f)  The Operator shall refuse to establish an Account if it is found that the information supplied is untrue or incomplete.

(g)  An Operator shall use commercially available and demonstrable standards to confirm that an Individual attempting to create a Wagering Account is not an Ineligible Person and shall also use commercially available and demonstrable standards to prevent Wagers from being placed by an Ineligible Person.

(h)  An Operator shall re-verify a Player's identification after it has or should have reasonable suspicion that the Player's identification may have been compromised.

History Note:        Authority G.S. 18C-114(a)(14);

Previously adopted as Rule 1G-002;

Eff. January 8, 2024;

Readopted Eff. March 27, 2024.