C.M.R. 16, 633, ch. 62 - GEOLOCATION AND REMOTE ACCESS
1. A mobile
operator or management services provider shall only accept mobile wagers from
patrons that have been affirmatively located as being physically present in the
State of Maine at the time of their wager .
2. In order to prevent unauthorized use of a
mobile sports wagering system, the operator or management services provider
must utilize a geolocation system to reasonably detect the physical location of
a patron attempting to access the mobile sports wagering system; and to monitor
and block unauthorized attempts to access the mobile sports wagering
system.
3. Geolocation timing and
verification frequency:
A. To ensure the
patron is continually located within the permitted boundary, and that the
device maintains compliance to all geolocation and fraud requirements
throughout the wagering session, the mobile sports wagering system must be
equipped to dynamically monitor the patron 's location and block unauthorized
attempts to access the system throughout the duration of the patron
session .
B. The internet or mobile
sports wagering system shall trigger:
(1) A
geolocation check prior to the placement of the first bet or wager ;
(2) Recurring periodic geolocation checks, if
a patron session is longer than a single bet or wager , shall be administered as
follows:
(a) Static connections: recheck at
least every twenty (20) minutes or five (5) minutes if within one (1) mile of
the border.
(b) Mobile connections:
recheck intervals to be based on a patron 's proximity to the border with an
assumed travel velocity of 65 miles per hour or a demonstrated average velocity
of a roadway/path. This interval shall not exceed twenty (20)
minutes.
(3) Upon a
change of IP address, a geolocation check shall occur prior to placement of the
next wager ;
(4) An immediate
recheck if the patron cannot be located due to a momentary absence of location
data mid-session (and the immediately preceding geolocation check during the
same wagering session was successful). A total of five (5) rechecks within a
period of 5 minutes are permitted in this scenario; thereafter, wagering must
cease if the patron cannot be successfully located. Exercising this option is
acceptable only when the device is accessing the internet utilizing a static
(non-mobile) access point.
(5) If
all required geolocation rechecks have been exhausted, and the location of the
patron is still inconclusive, the mobile sports wagering system may permit the
patron to complete their current round of play, including any continuation
bets, before their wagering session is terminated.
4. The geolocation service
provider shall provide the regulator with a real-time dashboard tool and data
feed which:
A. Is customizable and provides
geolocation data and visuals on demand.
B. Provides historical geolocation data up to
six months prior.
C. Displays and
is filterable by, at a minimum, the following data:
(1) Time period;
(2) Username;
(3) Operator name;
(4) Device identifier;
(5) Country, state/province, city;
(6) Passed/failed transactions and failure
reasons;
(7) IP address;
(8) Device type and device operating system;
and
(9) Distance to border or
boundary
D. Provides an
interactive mapping tool capable of:
(1)
Displaying locations of geolocation transactions;
(2) Geofencing to building level;
and
(3) Using coordinates to
pinpoint locations.
E.
Provides data, visuals, and reporting capabilities identifying suspicious
activity, including:
(1) Malicious or repeated
location spoofing;
(2) Account
sharing and device sharing;
(3)
Inconsistent locations (location jumping); and
(4) Other high-risk transactional
data.
F. Tools should
comply with data privacy and security standards and regulations to protect user
data and privacy.
5. A
geolocation system supplier shall be licensed in the state as a sports wagering
supplier.
6. A Geolocation system
shall, prior to use, undergo a system certification conducted by an independent
testing laboratory, approved by the Director . Specific requirements may also be
issued by the Director at times when updates or changes are required.
Notes
October 29, 2023 - filing 2023-209
STATUTORY AUTHORITY: 8 M.R.S. §1203(2)
State regulations are updated quarterly; we currently have two versions available. Below is a comparison between our most recent version and the prior quarterly release. More comparison features will be added as we have more versions to compare.
1. A mobile operator or management services provider shall only accept mobile wagers from patrons that have been affirmatively located as being physically present in the State of Maine at the time of their wager.
2. In order to prevent unauthorized use of a mobile sports wagering system, the operator or management services provider must utilize a geolocation system to reasonably detect the physical location of a patron attempting to access the mobile sports wagering system; and to monitor and block unauthorized attempts to access the mobile sports wagering system.
3. Geolocation timing and verification frequency:
A. To ensure the patron is continually located within the permitted boundary, and that the device maintains compliance to all geolocation and fraud requirements throughout the wagering session, the mobile sports wagering system must be equipped to dynamically monitor the patron's location and block unauthorized attempts to access the system throughout the duration of the patron session.
B. The internet or mobile sports wagering system shall trigger:
(1) A geolocation check prior to the placement of the first bet or wager;
(2) Recurring periodic geolocation checks, if a patron session is longer than a single bet or wager, shall be administered as follows:
(a) Static connections: recheck at least every twenty (20) minutes or five (5) minutes if within one (1) mile of the border.
(b) Mobile connections: recheck intervals to be based on a patron's proximity to the border with an assumed travel velocity of 65 miles per hour or a demonstrated average velocity of a roadway/path. This interval shall not exceed twenty (20) minutes.
(3) Upon a change of IP address, a geolocation check shall occur prior to placement of the next wager;
(4) An immediate recheck if the patron cannot be located due to a momentary absence of location data mid-session (and the immediately preceding geolocation check during the same wagering session was successful). A total of five (5) rechecks within a period of 5 minutes are permitted in this scenario; thereafter, wagering must cease if the patron cannot be successfully located. Exercising this option is acceptable only when the device is accessing the internet utilizing a static (non-mobile) access point.
(5) If all required geolocation rechecks have been exhausted, and the location of the patron is still inconclusive, the mobile sports wagering system may permit the patron to complete their current round of play, including any continuation bets, before their wagering session is terminated.
4. The geolocation service provider shall provide the regulator with a real-time dashboard tool and data feed which:
A. Is customizable and provides geolocation data and visuals on demand.
B. Provides historical geolocation data up to six months prior.
C. Displays and is filterable by, at a minimum, the following data:
(1) Time period;
(2) Username;
(3) Operator name;
(4) Device identifier;
(5) Country, state/province, city;
(6) Passed/failed transactions and failure reasons;
(7) IP address;
(8) Device type and device operating system; and
(9) Distance to border or boundary
D. Provides an interactive mapping tool capable of:
(1) Displaying locations of geolocation transactions;
(2) Geofencing to building level; and
(3) Using coordinates to pinpoint locations.
E. Provides data, visuals, and reporting capabilities identifying suspicious activity, including:
(1) Malicious or repeated location spoofing;
(2) Account sharing and device sharing;
(3) Inconsistent locations (location jumping); and
(4) Other high-risk transactional data.
F. Tools should comply with data privacy and security standards and regulations to protect user data and privacy.
5. A geolocation system supplier shall be licensed in the state as a sports wagering supplier.
6. A Geolocation system shall, prior to use, undergo a system certification conducted by an independent testing laboratory, approved by the Director. Specific requirements may also be issued by the Director at times when updates or changes are required.
Notes
October 29, 2023 - filing 2023-209
STATUTORY AUTHORITY: 8 M.R.S. §1203(2)