Ill. Admin. Code tit. 11, § 1900.1450 - Sports Wagering System Requirements

a) Each master sports wagering licensee shall operate a single sports wagering system through which all sports wagering activity is conducted and recorded.

b) At no cost to the Board, each master sports wagering licensee shall provide the Board remote, read only, real time access to the sports wagering system. That access shall include, at minimum:

1) Complete access to all records of wagers, including canceled, voided, pending, and redeemed wagers;

2) Ability to query or sort wagering data; and

3) Ability to export wagering data in a non-proprietary format.

c) The sports wagering system shall have the capability to provide to a sports governing body real-time information regarding wagers placed on that sports governing body's events, when required under a request for cooperation pursuant to Section 1900.130. That information shall include:

1) A record of all wagers placed;

2) Amount and type of wager;

3) Location the wager was placed if it was placed in person;

4) If the wager was placed via the internet wagering system, the internet protocol address;

5) If the wager was placed via the internet wagering system and geolocation data exists, geolocation data shall be provided but it shall not be more detailed than the nearest quarter mile;

6) If the wager was placed via a sports wagering account, a unique, non-personally identifying account number; and

7) Any records of abnormal wagering activity identified by the master sports wagering licensee.

d) The Board may develop and implement a central sports wagering monitoring system for the purpose of compiling all sports wagering activity data from all master sports wagering licensees. In such event, each master sports wagering licensee shall provide all sports wagering activity data in a format compatible with the central sports wagering monitoring system.

e) All servers necessary to the placement or resolution of wagers, other than backup servers, shall be physically located in the State of Illinois.

f) Each master sports wagering licensee shall maintain modern best practices to ensure the security and integrity of the sports wagering system, including, but not limited to:

1) Physical security;

2) Access control;

3) Network security;

4) Resistance to manipulation;

5) Redundancy; and

6) Error detection.

g) A sports wagering system shall maintain records of all wagers for a period of not less than 10 years.

h) A sports wagering system shall record at minimum the following information for each wager:

1) Description of event or contest;

2) Unique identifier for the event or contest;

3) Wager selection;

4) Type of wager;

5) Amount of wager;

6) Odds and amount of potential payout;

7) Date and time of wager;

8) Unique identifier for the wager;

9) Unique identifier of the sports wagering account or patron, if applicable;

10) Internet protocol address and geolocation information, if the wager is placed through a mobile device;

11) Unique identifier of the kiosk or point of sale device through which the wager was placed, if applicable;

12) Unique identifier of the kiosk or point of sale device through which the wager was redeemed, if applicable; and

13) Whether a wager was cancelled or voided, and the reason, if applicable.

i) A sports wagering system shall perform, at least once every 24 hours, a self-authentication process on all software used to offer, record and process wagers to ensure there have been no unauthorized modifications. In the event of an authentication failure, a master sports wagering licensee shall immediately notify the Board. The results of all self-authentication attempts shall be recorded by the system and maintained for a period of not less than 90 days.

j) A master sports wagering licensee shall have internal controls in place to review the accuracy and timeliness of any data feeds used to offer or settle wagers. In the event that an incident or error occurs that results in a loss of communication with data feeds used to offer or redeem wagers, that error shall be recorded in a log capturing the date and time of the error, the nature of the error and a description of its impact on the system's performance. That information shall be maintained for a period of not less than six months.

k) If a master sports wagering licensee becomes aware of a reproducible error in the sports wagering system that relates to network security, data security, accurate placement, or recording or redemption of wagers, or otherwise calls into question the security and integrity of the internet wagering system, the licensee shall notify the Board immediately. The notification shall include:

1) A description of the error;

2) Risks created or imposed by the error; and

3) Efforts being taken by the master sports wagering licensee to prevent any impact to the security and integrity of the sports wagering system.

l) If an active sports wagering system ever fails, crashes, or becomes inoperable for any reason, the master sports wagering licensee shall notify the Board immediately.

Notes

Ill. Admin. Code tit. 11, § 1900.1450

Added at 44 Ill. Reg. 10581, effective 6/4/2020.