Current through Register Vol. 54, No. 25, June 22, 2024
Section 811a.7 - Mandatory interactive gaming system logging(a) An interactive gaming system must employ a mechanism capable of maintaining a separate copy of the information required to be logged under this chapter on a separate and independent logging device capable of being administered by an employee with no incompatible function. If the interactive gaming system can be configured so that any logged data is in a secure transaction file, a separate logging device is not required. (b) An interactive gaming system must provide a mechanism for the Board to query and export, in a format required by the Board, all gaming system data. (c) An interactive gaming system must electronically log the date and time any interactive gaming account is created or terminated (Account Creation Log). (d) An interactive gaming system must maintain all information necessary to recreate player game play and account activity during each player session, including any identity or location verifications, for no less than 10 years. (e) Unless otherwise authorized by the Board, when software is installed on or removed from an interactive gaming system, the action must be recorded in a secure electronic log (Software Installation/Removal Log), which must include all of the following: (1) The date and time of the action. (2) The identification of the software. (3) The identity of the person performing the action. (f) Unless otherwise authorized by the Board, when a change in the availability of game software is made on a gaming system, the change must be recorded in a secure electronic log (Game Availability Log), which must include all of the following: (1) The date and time of the change. (2) The identification of the software. (3) The identity of the person performing the change. (g) Unless otherwise exempted by the Board, an interactive gaming system must record all promotional offers (Promotions Log) issued through the system. The Promotions Log must provide the information necessary to audit compliance with the terms and conditions of current and previous offers. (h) Results of all authentication attempts must be retained in an electronic log (Authentication Log) and accessible for 90 days. (i) All adjustments to gaming system data made using stored procedures must be recorded in an electronic log (Adjustments Log), which lists all of the following: (2) The identification and user ID of user performing the action. (3) A description of the event or action taken. (4) The initial and ending values of any data altered as a part of the event or action performed.