Iowa Admin. Code r. 491-14.7

Current through Register Vol. 47, No.14, January 8, 2025

Rule 491-14.7 - Account registration

A person must have an established account in order to participate in fantasy sports contests. To establish an account, an application for an account shall be authorized in a manner approved by the administrator and shall include the applicant's full legal name, principal residential address, date of birth and any other information required by the commission. The account registration process shall also include:

(1) Age verification to prevent persons under the legal age from participating in fantasy sports contests and establishing an account.

(2) Customer verification.

a. A customer verification process shall include an exact match of the following:

(1) Date of birth, including month, date and year of birth.

(2) The last four digits of the social security number.

(3) Last name.

b. A customer verification process shall permit a flexible match by allowing the following:

(1) First name may include nicknames and abbreviations.

(2) Address may include abbreviations.

c. A customer verification process shall authenticate identification by the following:

(1) Answering knowledge-based questions based on the applicant's public or private data; or

(2) Verifying that device ID and phone number match the applicant's publicly known data; or

(3) Comparing a valid government-issued ID to a photo of the applicant taken at the time of account registration; or

(4) Another method as approved by the administrator.

(3) Verification that the customer is not on the statewide self-exclusion list set forth in Iowa Code section 99F.4(22) prior to establishing an account.

(4) Availability and acceptance of a set of terms and conditions that are also readily accessible to the customer before and after registration and noticed when updated. Notices shall include, at a minimum, the following:

a. Explanation of rules in which any unrecoverable malfunctions of hardware/software are addressed including, but not limited to, if the unrecoverable malfunction, fantasy sports event cancellation, or any other catastrophic malfunction results in the voiding of any contests.

b. Procedures to deal with interruptions caused by the suspension of data flow from the network server during a contest.

c. Specifications advising customers to keep their account credentials secure.

d. Statement that no underage individuals are permitted to participate in contests.

(5) Availability and acceptance of a privacy policy that is also readily accessible to the customer before and after registration and noticed when updated that includes, at a minimum, the following:

a. Statement of information that is collected, the purpose for information collection and the conditions under which information may be disclosed.

b. Statement that any information obtained in respect to customer registration or account establishment must be done in compliance with the privacy policy.

c. Requirement that any information about customer accounts which is not subject to disclosure pursuant to the privacy policy must be kept confidential, except where the release of that information is required by law.

d. Requirement that all customer information must be securely erased from hard disks, magnetic tapes, solid state memory and other devices before the device is properly disposed of by the licensee. If erasure is not possible, the storage device must be destroyed.

Iowa Admin. Code r. 491-14.7

Adopted by IAB August 28, 2019/Volume XLII, Number 5, effective 7/31/2019

Amended by IAB April 8, 2020/Volume XLII, Number 21, effective 5/13/2020

Amended by IAB February 21, 2024/Volume XLVI, Number 17, effective 3/27/2024