A person must have an established account in order to
participate in fantasy sports contests. To establish an account, an application
for an account shall be authorized in a manner approved by the administrator
and shall include the applicant's full legal name, principal residential
address, date of birth and any other information required by the commission.
The account registration process shall also include:
(1) Age verification to prevent persons under
the legal age from participating in fantasy sports contests and establishing an
account.
(2) Customer verification.
a. A
customer verification process shall
include an exact match of the following:
(1)
Date of birth, including month, date and year of birth.
(2) The last four digits of the social
security number.
(3) Last
name.
b. A
customer
verification process shall permit a flexible match by allowing the following:
(1) First name may include nicknames and
abbreviations.
(2) Address may
include abbreviations.
c.
A
customer verification process shall authenticate identification by the
following:
(1) Answering knowledge-based
questions based on the applicant's public or private data; or
(2) Verifying that device ID and phone number
match the applicant's publicly known data; or
(3) Comparing a valid government-issued ID to
a photo of the applicant taken at the time of account registration;
or
(4) Another method as approved
by the administrator.
(3) Verification that the customer is not on
the statewide self-exclusion list set forth in Iowa Code section
99F.4(22)
prior to establishing an account.
(4) Availability and acceptance of a set of
terms and conditions that are also readily accessible to the
customer before
and after registration and noticed when updated. Notices shall include, at a
minimum, the following:
a. Explanation of
rules in which any unrecoverable malfunctions of hardware/software are
addressed including, but not limited to, if the unrecoverable malfunction,
fantasy sports event cancellation, or any other catastrophic malfunction
results in the voiding of any contests.
b. Procedures to deal with interruptions
caused by the suspension of data flow from the network server during a
contest.
c. Specifications advising
customers to keep their account credentials secure.
d. Statement that no underage individuals are
permitted to participate in contests.
(5) Availability and acceptance of a privacy
policy that is also readily accessible to the
customer before and after
registration and noticed when updated that includes, at a minimum, the
following:
a. Statement of information that is
collected, the purpose for information collection and the conditions under
which information may be disclosed.
b. Statement that any information obtained in
respect to customer registration or account establishment must be done in
compliance with the privacy policy.
c. Requirement that any information about
customer accounts which is not subject to disclosure pursuant to the privacy
policy must be kept confidential, except where the release of that information
is required by law.
d. Requirement
that all customer information must be securely erased from hard disks, magnetic
tapes, solid state memory and other devices before the device is properly
disposed of by the licensee. If erasure is not possible, the storage device
must be destroyed.
Notes
Iowa Admin. Code r. 491-14.7
Adopted by
IAB
August 28, 2019/Volume XLII, Number 5, effective
7/31/2019
Amended by
IAB
April 8, 2020/Volume XLII, Number 21, effective
5/13/2020
Amended by
IAB
February 21, 2024/Volume XLVI, Number 17, effective
3/27/2024