# COMAR Title 36 — Maryland State Lottery and Gaming Control Agency

## Subtitle 04 — Video Lottery Terminals

### Chapter 01 — Video Lottery Technical Standards

**Authority:** State Government Article, §§9-1A-02, 9-1A-04, 9-1A-15, 9-1A-22, and 9-1A-24, Annotated Code of Maryland

**Administrative History:** Effective date:

**Administrative History:** Regulations .01—.32 adopted as an emergency provision effective March 1, 2013 (40:6 Md. R. 470); adopted permanently effective April 29, 2013 (40:8 Md. R. 725)

**Administrative History:** Regulation .01A amended effective October 27, 2014 (41:21 Md. R. 1262)

**Administrative History:** Regulation .11 amended effective November 14, 2022 (49:23 Md. R. 997)

**Administrative History:** Regulation .11D amended as an emergency provision effective December 12, 2023 (50:26 Md. R. 1130); amended permanently effective May 27, 2024 Md. R. 529)

**Administrative History:** Regulation .11E, I amended effective January 7, 2016 (42:26 Md. R. 1597)

**Administrative History:** Regulation .12C adopted effective October 7, 2019 (46:20 Md. R. 848)

**Administrative History:** Regulation .18 amended effective October 19, 2020 (47:21 Md. R. 905)

**Administrative History:** Regulation .18D, E amended effective October 22, 2018 (45:21 Md. R. 976)

**Administrative History:** Regulation .20A amended effective October 23, 2017 (44:21 Md. R. 985)

**Administrative History:** Regulation .20B amended effective February 16, 2015 (42:3 Md. R. 319)

**Administrative History:** Regulation .21 amended effective October 7, 2019 (46:20 Md. R. 848)

**Administrative History:** Regulation .21E amended effective October 22, 2018 (45:21 Md. R. 976)

**Administrative History:** Regulation .27B, D amended effective September 6, 2021 (48:18 Md. R. 695)

**Administrative History:** Regulation .28F amended effective September 26, 2016 (43:19 Md. R. 1073); October 19, 2020 (47:21 Md. R. 905)

**Administrative History:** Regulation .30D amended effective October 22, 2018 (45:21 Md. R. 976); September 6, 2021 (48:18 Md. R. 695)

**Administrative History:** Regulation .30D, E amended effective January 7, 2016 (42:26 Md. R. 1597)

**Administrative History:** Regulation .31C amended effective October 23, 2017 (44:21 Md. R. 985); October 22, 2018 (45:21 Md. R. 976); October 7, 2019 (46:20 Md. R. 848)

#### Regulation .01 Definitions.

*COMAR 36.04.01.01*

A. In addition to the terms defined in State Government Article, §9-1A-01, Annotated Code of Maryland and in COMAR 36.03.01.02, which have the same meaning in this subtitle, in this subtitle, the following terms have the meanings indicated.

B. Terms Defined.

  (1) “Double-up” means an optional wager on a video lottery terminal, the availability of which is triggered by a preceding winning event, in which the player has a mathematically equal probability of doubling the amount wagered or losing the entire amount placed at risk.

  (2) “Linked” means to connect with.

  (3) “Modification” means a change or alteration that:

    (a) Affects the conduct of play or operation of equipment, a system, or software including a change or alteration to a:

      (i) Control program;

      (ii) Graphics program; or

      (iii) Payout percentage; and

    (b) Does not include the replacement of one approved component with an identical component.

  (4) “Progressive controller” means a device independent of the operating system of a video lottery terminal that calculates and transmits to a video lottery terminal the amount of an available progressive jackpot based on:

    (a) A pre-established rate of progression; and

    (b) Denomination of the video lottery terminal.

  (5) “Progressive jackpot” means a jackpot offered by a video lottery terminal that may increase uniformly in value based on wagers as the video lottery terminal is played.

  (6) “Random number generator” means a computational or physical functionality within the operating system of an electronic device which ensures the observed unpredictability and absence of pattern in a set of elements or events that have definite probabilities of occurrence.

  (7) “RAM” means random access memory.

  (8) “RAM clear” means a process that results in the zeroing out of any:

    (a) Meter information;

    (b) Configuration information; or

    (c) Data stored in the random access memory of a video lottery terminal.

  (9) “Skill” means the application of intelligence and specific knowledge to achieve the best result when a video lottery terminal offers a choice of options during game play.

  (10) “Theme” means a concept, subject matter, and methodology of design of a video lottery terminal.

  (11) “Version” means a sequence number or designation assigned to equipment, a system, or software to identify the initial release of the equipment, system, or software and to track changes or revisions to the initial release.

  (12) “Wide area progressive system” means a system independent of the operating system of a video lottery terminal that calculates and transmits to video lottery terminals linked in two or more facilities in or outside the State the amount of an available progressive jackpot based on:

    (a) A pre-established rate of progression; and

    (b) Denomination of the video lottery terminal.

#### Regulation .02 Testing, Certification, and Approval of Equipment, a System, or Software.

*COMAR 36.04.01.02*

A. A manufacturer may not offer the equipment, systems, or software enumerated in §E of this regulation, or a modification to a Commission-approved version of that equipment, system or software, for sale, lease, distribution, or use in a facility without it having been:

  (1) Tested and certified by an independent certified testing laboratory; and

  (2) Approved in writing by the Commission.

B. A facility operator may not purchase, lease, or otherwise acquire the right to install, utilize, or make available for use the equipment, systems, or software enumerated in §E(3) of this regulation, or a modification to a Commission-approved version of that equipment, system, or software, without it having been:

  (1) Tested and certified by an independent certified testing laboratory; and

  (2) Approved in writing by the Commission.

C. A facility operator may not modify, alter, or tamper with the central monitor and control system or a video lottery terminal.

D. Modification, alteration, or tampering with the central monitor and control system or a video lottery terminal may result in the immediate suspension of an operation license by the Commission.

E. The testing, certification, and approval requirements of this regulation shall, at a minimum, apply to:

  (1) The central monitor and control system;

  (2) A video lottery terminal;

  (3) The interoperability between a video lottery terminal and:

    (a) A video lottery terminal data system;

    (b) A casino management system;

    (c) A gaming ticket system;

    (d) A promotional play system;

    (e) A player tracking system;

    (f) A ticket redemption unit;

    (g) An automated jackpot payout machine;

    (h) An external bonusing system;

    (i) A cashless funds transfer system; and

    (j) A progressive controller; and

  (4) Other equipment, systems, or software designated for testing and certification by the Commission.

F. A prototype of equipment, a system, or software required to be tested, certified, and approved under §E of this regulation, or a modification to a Commission-approved version of that equipment, system, or software shall, at a minimum, be tested for:

  (1) Overall operational integrity;

  (2) Conformance with State Government Article, §9-1A, Annotated Code of Maryland, and this subtitle;

  (3) The technical standards enumerated in any Request for Proposals, issued by the Commission pertaining to the equipment, system, or software, as amended or clarified; and

  (4) If applicable, compatibility and compliance with the central monitor and control system communication protocol designated by the Commission, including the ability to communicate with the central monitor and control system on a real-time basis for:

    (a) Meter retrieval; and

    (b) Video lottery terminal:

      (i) Status; and

      (ii) Activation and deactivation.

G. Until such time as the Commission determines it has assembled a list of approved equipment, systems, and software sufficient to meet the needs of facility operators under State Government Article, §9-1A-21(d), Annotated Code of Maryland, notwithstanding the requirements of Regulations .03 and .04 of this chapter, the Commission may permit an abbreviated testing and approval process in accordance with the requirements of Regulation .05 of this chapter.

H. If a facility operator develops any equipment, system, or software that is functionally equivalent to that enumerated in §E(3) of this regulation, or modifies a Commission-approved version of that equipment, system, or software, the facility operator shall be subject to the testing, certification, and approval requirements of this chapter to the same extent as if the equipment, system, or software were developed or modified by a manufacturer.

I. A manufacturer shall pay all costs of testing, certification, and approval under this chapter including, but not limited to, all costs associated with:

  (1) Transportation;

  (2) Equipment and technical services required by an independent certified testing laboratory to conduct the testing and certification process; and

  (3) Implementation testing.

#### Regulation .03 Submission of Equipment, a System, or Software for Testing and Certification.

*COMAR 36.04.01.03*

A. A manufacturer seeking Commission approval for equipment, a system, or software other than a video lottery terminal shall submit the equipment, system, or software to an independent certified testing laboratory.

B. The submission required by §A of this regulation shall include the following:

  (1) A request for testing and certification under Regulation .02F of this chapter;

  (2) A prototype of the equipment, system, or software identical in all mechanical, electrical, electronic, and other respects to that for which Commission approval is sought;

  (3) Technical and operator manuals;

  (4) A description of all security methodologies incorporated into the design of the equipment, system, or software including, if applicable:

    (a) Password protection;

    (b) Encryption methodology for all alterable media;

    (c) Auto-authentication of software;

    (d) Network redundancy; and

    (e) Back-up and recovery procedures;

  (5) A schematic or network diagram of the major components of the equipment, system, or software with a:

    (a) Description of each component's functionality; and

    (b) Software object report;

  (6) A description of the data flow, in narrative and in schematic form, including:

    (a) Data cabling; and

    (b) If applicable, communications methodology for multi-site applications;

  (7) A list of:

    (a) Computer operating systems;

    (b) Third-party software; and

    (c) Available system reports;

  (8) System software and hardware installation procedures;

  (9) A description of the method used to authenticate software;

  (10) All source code;

  (11) If applicable, a description of the features offered by the equipment, system, or software with regard to:

    (a) Player and employee card functions; and

    (b) Reconciliation procedures;

  (12) If applicable, a description of any interoperability testing conducted by the manufacturer, including test results identified by manufacturer, model, and software identification and version number, for the submitted equipment, system, or software's connection to any of the following:

    (a) Video lottery terminal;

    (b) Video lottery terminal data system;

    (c) Casino management system;

    (d) Gaming ticket system;

    (e) Promotional play system;

    (f) Player tracking system;

    (g) Ticket redemption unit;

    (h) Automated jackpot payout machine;

    (i) External bonusing system;

    (j) Cashless funds transfer system; and

    (k) Progressive controller;

  (13) If applicable, a description, accompanied by diagrams, schematics, and specifications, of the creation of a:

    (a) Gaming ticket and the redemption options available; and

    (b) Promotional play instrument and the redemption options available; and

  (14) If requested by the Commission or an independent certified testing laboratory:

    (a) Any specialized hardware, software, or other equipment, inclusive of technical support and maintenance, required to conduct the testing and certification process; and

    (b) Additional documentation pertaining to the equipment, system, or software being tested.

C. A manufacturer seeking Commission approval for a modification to a Commission-approved version of equipment, a system, or software other than a video lottery terminal shall submit the proposed modification to an independent certified testing laboratory.

D. An independent certified testing laboratory selected by a manufacturer or the Commission to test a modification may be, but need not be, the testing laboratory that performed the initial prototype testing.

E. The submission required by §C of this regulation shall include the following:

  (1) A request for testing and certification under Regulation .02F of this chapter;

  (2) The equipment, system, or software proposed for modification;

  (3) A description of the proposed modification, accompanied by applicable diagrams, schematics, and specifications;

  (4) A narrative disclosing the purpose for the modification;

  (5) If requested by the Commission or an independent certified testing laboratory:

    (a) Any specialized hardware, software, or other equipment, inclusive of technical support and maintenance, required to conduct the testing and certification process; and

    (b) Additional documentation pertaining to the testing of the proposed modification.

F. At the conclusion of testing of a prototype or modification of equipment, a system, or software other than a video lottery terminal, an independent certified testing laboratory shall issue to the Commission a certification report in an:

  (1) Electronic form; and

  (2) Format acceptable to the Commission.

G. Upon receipt of a certification report from an independent certified testing laboratory, but prior to a decision to approve a prototype or modification of equipment, a system, or software other than a video lottery terminal, the Commission may require a trial period, as follows:

  (1) A trial period shall be of a scope and duration the Commission deems appropriate to assess the operation of the prototype or modification in a live gaming environment;

  (2) A trial period shall be subject to compliance by the manufacturer and the facility operator with specific terms and conditions required by the Commission, which may include:

    (a) Development and implementation of product specific accounting and internal controls; and

    (b) Periodic data reporting to the Commission;

  (3) The Commission may authorize the receipt of compensation by a manufacturer during a trial period; and

  (4) The Commission may order termination of a trial period at any time upon a determination by the Commission that:

    (a) A manufacturer or facility operator has not complied with the terms and conditions required by the Commission; or

    (b) Equipment, a system, or software is not performing as expected.

H. Upon receipt of a certification report from an independent certified testing laboratory, the Commission may:

  (1) Approve the prototype or modification, with or without specific conditions;

  (2) Reject the prototype or modification;

  (3) Require additional testing; or

  (4) Require a trial period under §G of this regulation.

I. Commission approval of a prototype or modification does not constitute a guarantee of its safety or reliability.

#### Regulation .04 Submission of a Video Lottery Terminal for Testing and Certification.

*COMAR 36.04.01.04*

A. A manufacturer seeking Commission approval for a video lottery terminal shall submit the video lottery terminal to an independent certified testing laboratory.

B. The submission required by §A of this regulation shall include the following:

  (1) A request for testing and certification under Regulation .02F of this chapter;

  (2) A prototype of the video lottery terminal identical in all mechanical, electrical, electronic, and other respects to that for which Commission approval is sought;

  (3) Technical and operator manuals;

  (4) A description of the video lottery terminal including:

    (a) Diagrams, schematics, and specifications; and

    (b) Documentation with regard to the manner in which the video lottery terminal was tested and emulated by the manufacturer prior to submission;

  (5) A copy, on electronically readable media, of all:

    (a) Executable software, including data and graphics information;

    (b) Source code for programs that have no commercial use other than as a component of a video lottery terminal; and

    (c) Graphical images displayed on a video lottery terminal including, if applicable:

      (i) Reel strips or card images;

      (ii) Rules and instructions; and

      (iii) Pay tables;

  (6) A mathematical explanation of the average and theoretical return to the player, listing all:

    (a) Assumptions; and

    (b) Steps in the formula including the treatment of bonus pays;

  (7) A description of:

    (a) Security methodologies incorporated into the design of a video lottery terminal including, if applicable:

      (i) Encryption methodology for all alterable media;

      (ii) Auto-authentication of software; and

      (iii) Recovery capability of a video lottery terminal on power interruption;

    (b) Tower light functions indicating the corresponding condition;

    (c) Error conditions and the corresponding action required; and

    (d) Use and function of available:

      (i) Dip switch settings; and

      (ii) Configurable options;

  (8) A description, accompanied by supporting test results, of the random number generator or generators used to determine the results of a wager, including a detailed explanation of:

    (a) Operational methodology; and

    (b) The manner by which the random number generator including the random number selection process is impervious to:

      (i) Outside influences;

      (ii) Interference from electro-magnetic, electrostatic, and radio frequencies; and

      (iii) Influence from ancillary equipment by means of data communications;

  (9) If a video lottery terminal requires or permits player skill in the theoretical derivations of the payout return, the source of strategy;

  (10) If required, a cross-reference between the meters denoted on the video lottery terminal and the meters required by:

    (a) Regulation .16 of this chapter; and

    (b) The technical standards enumerated in any Request for Proposals issued by the Commission pertaining to a video lottery terminal, as amended or clarified;

  (11) Program storage media including:

    (a) EPROMs;

    (b) EEPROMs; and

    (c) Any type of alterable media for video lottery terminal software;

  (12) Proof that a video lottery terminal has been inspected and approved for customer safety by a reputable testing laboratory;

  (13) If applicable, a description of any interoperability testing conducted by the manufacturer, including test results identified by manufacturer, model and software identification and version number, for the submitted video lottery terminal’s connection to any of the following:

    (a) Video lottery terminal data system;

    (b) Casino management system;

    (c) Gaming ticket system;

    (d) Promotional play system;

    (e) Player tracking system;

    (f) Ticket redemption unit;

    (g) Automated jackpot payout machine;

    (h) External bonusing system;

    (i) Cashless funds transfer system; and

    (j) Progressive controller;

  (14) A description of the manner in which the video lottery terminal was or will be tested for compatibility and compliance with the central monitor and control system communication protocol designated by the Commission including the ability to communicate with the central monitor and control system on a real time basis for:

    (a) Meter retrieval; and

    (b) Video lottery terminal:

      (i) Status; and

      (ii) Activation and deactivation;

  (15) Specialized hardware, software, or testing equipment, inclusive of technical support and maintenance, requested by an independent certified testing laboratory including, but not limited to:

    (a) An emulator for a specified microprocessor;

    (b) Personal computers;

    (c) Extender cables for CPU boards;

    (d) Target reel strips; and

    (e) Door defeats; and

  (16) If requested by the Commission or an independent certified testing laboratory, additional documentation pertaining to the video lottery terminal being tested including, but not limited to:

    (a) Hardware block diagrams of the major subsystems;

    (b) A complete set of schematics for all subsystems;

    (c) A wiring harness connection diagram; and

    (d) Technical specifications for any microprocessor or microcontroller.

C. A manufacturer seeking Commission approval for a modification to a Commission-approved version of a video lottery terminal, including a change in theme, shall submit the modification to an independent certified testing laboratory.

D. An independent certified testing laboratory selected by a manufacturer or the Commission to test a modification may, but need not be, the testing laboratory that performed the initial prototype testing.

E. The submission required by §C of this regulation shall include the following:

  (1) A request for testing and certification under Regulation .02F of this chapter;

  (2) The video lottery terminal proposed for modification;

  (3) A description of the proposed modification to the video lottery terminal, accompanied by applicable diagrams, schematics, and specifications;

  (4) If a change in theme is involved, a copy of the graphical images displayed on the video lottery terminal including, if applicable:

    (a) Reel strips and card images;

    (b) Rules and instructions; and

    (c) Pay tables;

  (5) If a change in the manner in which the average payout percentage is achieved, or a change in the theoretical return to the player is otherwise involved, a mathematical explanation of the return to the player, listing all:

    (a) Assumptions; and

    (b) Steps in the formula including the treatment of bonus pays;

  (6) If the proposed modification requires or permits player skill in the theoretical derivations of the payout return, the source of strategy;

  (7) A description of the manner in which the video lottery terminal was or will be tested for compatibility and compliance with the central monitor and control system communication protocol designated by the Commission including the ability to communicate with the central monitor and control system on a real time basis for:

    (a) Meter retrieval; and

    (b) Video lottery terminal:

      (i) Status; and

      (ii) Activation and deactivation; and

  (8) If requested by the Commission or an independent certified testing laboratory:

    (a) Any specialized hardware, software, or other equipment, inclusive of technical support and maintenance, required to conduct the testing and certification process; and

    (b) Additional documentation pertaining to the testing of the proposed modification.

F. At the conclusion of testing of a prototype or modification to a video lottery terminal, an independent certified testing laboratory shall issue to the Commission a certification report in an:

  (1) Electronic form; and

  (2) Format acceptable to the Commission.

G. Upon receipt of a certification report from an independent certified testing laboratory, but prior to a decision to approve a prototype or modification to a video lottery terminal, the Commission may require a trial period, as follows:

  (1) A trial period shall be of a scope and duration the Commission deems appropriate to assess the operation of the video lottery terminal in a live gaming environment;

  (2) A trial period shall be subject to compliance by the manufacturer and the facility operator with specific terms and conditions required by the Commission, which may include:

    (a) Development and implementation of product specific accounting and internal controls; and

    (b) Periodic data reporting to the Commission;

  (3) The Commission may authorize the receipt of compensation by a manufacturer during a trial period; and

  (4) The Commission may order termination of the trial period at any time upon a determination by the Commission that:

    (a) A manufacturer or facility operator has not complied with the terms and conditions required by the Commission; or

    (b) The video lottery terminal is not performing as expected.

H. Upon receipt of a certification report from an independent certified testing laboratory, the Commission may:

  (1) Approve the prototype or modification, with or without specific conditions;

  (2) Reject the prototype or modification;

  (3) Require additional testing; or

  (4) Require a trial period under §G of this regulation.

I. Commission approval of a prototype or modification of a video lottery terminal does not constitute a guarantee of its safety or reliability.

#### Regulation .05 Abbreviated Testing and Certification.

*COMAR 36.04.01.05*

A. Except with regard to the Commission’s central monitor and control system, a manufacturer may, during the period specified in Regulation .02G of this chapter, seek Commission approval of a prototype or proposed modification under an abbreviated testing and certification process for any equipment, system, or software required to be tested and certified under Regulation .02E of this chapter.

B. A manufacturer shall submit the equipment, system or software to an independent certified testing laboratory.

C. The submission required by §B of this regulation shall include the following:

  (1) A request for abbreviated testing and certification under this regulation naming the state within the United States on whose regulations and technical standards the manufacturer proposes the Commission rely;

  (2) A prototype of the equipment, system, or software identical in all mechanical, electrical, electronic, and other respects to that for which Commission approval is sought;

  (3) A certification signed by the chief engineer of the manufacturer, or the engineer in charge of the division of the manufacturer responsible for producing the equipment or system submitted, representing that:

    (a) The prototype or proposed modification is identical in all mechanical, electrical, electronic and other respects to one which has been tested and certified by:

      (i) A testing laboratory operated by the named state; or

      (ii) An independent certified testing laboratory on behalf of the named state;

    (b) The manufacturer is licensed in good standing in the named state;

    (c) The submitted equipment, system, or software has all regulatory approvals prerequisite to sale, lease, or distribution in the named state;

    (d) The testing standards of the named state are comprehensive, thorough and involve substantially similar technical requirements and safeguards as those required by:

      (i) State Government Article, §9-1A, Annotated Code of Maryland, and this subtitle; and

      (ii) The technical standards enumerated in any Request for Proposals issued by the Commission pertaining to the equipment, system, or software, as amended or clarified; and

    (e) The manufacturer has fully disclosed any conditions or limitations placed by the named state on the operation or placement of the equipment, system, or software:

      (i) At the time of approval; or

      (ii) Subsequent to approval;

  (4) Copies of the submission package, and any amendments thereto, filed in the named state including any:

    (a) Checklists;

    (b) Correspondence, review letters or certification letters issued by:

      (i) The testing laboratory operated by the named state; or

      (ii) An independent certified testing laboratory on behalf of the named state; and

    (c) Final approval letter issued by the named state;

  (5) If applicable, a description of any interoperability testing conducted by the manufacturer, including test results identified by manufacturer, model and software identification and version number, for the submitted equipment or system’s connection to a:

    (a) Video lottery terminal;

    (b) Video lottery terminal data system;

    (c) Casino management system;

    (d) Gaming ticket system;

    (e) Promotional play system;

    (f) Player tracking system;

    (g) Ticket redemption unit;

    (h) Automated jackpot payout machine;

    (i) External bonusing system;

    (j) Cashless funds transfer system; and

    (k) Progressive controller;

  (6) If the submission involves a video lottery terminal, a description of the manner in which the video lottery terminal was or will be tested for compatibility and compliance with the central monitor and control system communication protocol designated by the Commission including the ability to communicate with the central monitor and control system on a real time basis for:

    (a) Meter retrieval; and

    (b) Video lottery terminal:

      (i) Status; and

      (ii) Activation and deactivation; and

  (7) If requested by the Commission or an independent certified testing laboratory:

    (a) Any specialized hardware, software, or other equipment, inclusive of technical support and maintenance, required to conduct the testing and certification process; and

    (b) Additional documentation pertaining to the equipment, system, or software being tested.

D. At the conclusion of testing of a prototype or modification, an independent certified testing laboratory conducting abbreviated testing and certification shall issue to the Commission a certification report in an:

  (1) Electronic form; and

  (2) Format acceptable to the Commission.

E. The certification report issued under §D of this regulation shall state:

  (1) Whether the independent certified testing laboratory concurs with the manufacturer that the testing standards of the named state are comprehensive, thorough and involve substantially similar technical requirements and safeguards as those required by:

    (a) State Government Article, §9-1A, Annotated Code of Maryland, and this subtitle; and

    (b) The technical standards enumerated in any Request for Proposals issued by the Commission pertaining to the equipment, system, or software, as amended or clarified;

  (2) Whether the documentation required by §C(3) of this regulation is complete;

  (3) With respect to any deficiency noted relating to §E(1) or (2) of this regulation, the nature of the non-compliance; and

  (4) The results of any supplemental testing performed, including interoperability testing with the central monitor and control system.

F. Upon receipt of a certification report from an independent certified testing laboratory, the Commission may act with regard to:

  (1) Acceptance of the testing standards of the named state; and

  (2) The specific equipment, system, or software by:

    (a) Approving the prototype or modification, with or without specific conditions;

    (b) Rejecting the prototype or modification;

    (c) Requiring additional testing; or

    (d) Requiring a trial period under this chapter.

G. Commission approval of a prototype or proposed modification does not constitute a guarantee of its safety or reliability.

#### Regulation .06 Concatenated Binary Files and Related Documentation.

*COMAR 36.04.01.06*

A manufacturer shall deliver each video lottery terminal to the Commission with:

A. The concatenated binary file signature corresponding to the Commission-approved version of the video lottery terminal in a form satisfactory to the:

  (1) Commission; and

  (2) Central monitor and control system operator; and

B. A file, in a form satisfactory to the Commission, describing the video lottery terminal including:

  (1) Manufacturer’s:

    (a) Serial number;

    (b) Model number;

    (c) Software identification number; and

    (d) Version number;

  (2) Denomination or a designation as multi-denomination;

  (3) Cabinet style;

  (4) An indication as to whether the video lottery terminal is a:

    (a) Progressive; or

    (b) Wide area progressive;

  (5) Configured for use with a:

    (a) Gaming ticket system;

    (b) External bonusing system; and

    (c) Cashless funds transfer system; and

  (6) Other information required by the Commission.

#### Regulation .07 Emergency Modification of Equipment, a System, or Software.

*COMAR 36.04.01.07*

A. Notwithstanding the requirements of Regulations .03C and .04C of this chapter, the Commission may, on submission of a written request by a manufacturer, authorize installation of a modification to equipment, a system, or software required to be tested, certified, and approved by the Commission under Regulation .02E of this chapter, on an emergency basis.

B. A written request submitted by a manufacturer to the Commission shall document the:

  (1) Equipment, system, or software proposed for emergency modification including:

    (a) Software identification number; and

    (b) Version number;

  (2) Facility;

  (3) Reason for the emergency modification; and

  (4) Proposed date and time of installation.

C. A manufacturer may not install an emergency modification without the written approval of the Commission.

D. No more than 15 days following receipt of Commission authorization on an emergency modification, a manufacturer shall submit a modification identical to that receiving emergency authorization for testing, certification and approval under this chapter.

#### Regulation .08 Notice of Known or Suspected Defect.

*COMAR 36.04.01.08*

A. A manufacturer shall immediately notify the Commission of any known or suspected defect or malfunction in equipment, system, or software required to be tested, certified, and approved by the Commission under Regulation .02E of this chapter.

B. A manufacturer shall:

  (1) Confirm in writing any notice given to the Commission verbally pursuant to §A of this regulation; and

  (2) If required by the Commission, notify a facility operator of any known or suspected defect or malfunction in equipment, a system, or software installed in its facility.

C. A facility operator shall immediately notify the Commission of any known or suspected defect or malfunction in equipment, system, or software required to be tested, certified, and approved by the Commission under Regulation .02E of this regulation.

D. A facility operator shall confirm in writing any notice given to the Commission verbally pursuant to §C of this regulation.

#### Regulation .09 Revocation.

*COMAR 36.04.01.09*

A. The Commission may, at any time, revoke an approval granted to equipment, a system, or software under Regulation .03, .04 or .05 of this chapter on a determination by the Commission that the equipment, system, or software does not comply with:

  (1) State Government Article, §9-1A, Annotated Code of Maryland, and this subtitle;

  (2) The technical standards enumerated in any Request for Proposals issued by the Commission pertaining to the equipment, system, or software, as amended or clarified; and

  (3) The central monitor and control system communication protocol designated by the Commission including the ability to communicate with the central monitor and control system on a real time basis for:

    (a) Meter retrieval; and

    (b) Video lottery terminal:

      (i) Status; and

      (ii) Activation and deactivation.

B. The Commission may, at any time, impose additional conditions on the operation or placement of Commission-approved equipment, systems, or software.

C. A revocation by the Commission of an approval under §A of this regulation does not give rise to an appeal right.

#### Regulation .10 Communication Requirements.

*COMAR 36.04.01.10*

A. A manufacturer shall enable a video lottery terminal to communicate with the Commission’s central monitor and control system through any gaming industry communication protocols designated by the Commission.

B. Unless the Commission notifies a manufacturer in writing to the contrary, SAS v.6.02 shall be the designated communication protocol.

#### Regulation .11 Average Payout Percentage.

*COMAR 36.04.01.11*

A. Definitions.

  (1) In this regulation, the following terms have the meanings indicated.

  (2) Terms Defined.

    (a) “Game cycle” means the finite set of all possible combinations of symbols on a video lottery terminal, including spinning reels or card images or other forms of video display or both.

    (b) “Theoretical payout percentage” means the total value of jackpots expected to be paid by a video lottery terminal divided by the total value of video lottery terminal wagers expected to be made on that video lottery terminal during the game cycle.

    (c) “Wager level” means all credit combinations available on a video lottery terminal from the minimum bet to the maximum bet.

B. A video lottery terminal shall have an average payout percentage which:

  (1) Is 85 percent or more; and

  (2) Does not exceed 100 percent.

C. Notwithstanding the requirements of §B of this regulation, in no event may a video lottery terminal have a theoretical payout percentage of less than 85 percent.

D. Unless the paytables have been previously approved by the Commission, a facility may not make available for play a video lottery terminal with an average payout percentage which exceeds 95 percent without the written approval of the Commission.

E. A facility’s gaming floor shall be configured to collectively achieve, at all times, an average payout percentage which:

  (1) Exceeds 85 percent; and

  (2) Does not exceed 95 percent.

F. The Commission and the facility operator shall, in selecting video lottery terminals and configuring a facility’s gaming floor, rely on the video lottery terminal’s theoretical payout percentage.

G. Once a facility is operational, the Commission shall:

  (1) Conduct periodic reviews to ensure that average payout percentages, on an average annual basis, comply with the requirements of this regulation; and

  (2) If necessary, require the modification or replacement of a video lottery terminal to ensure compliance with the average payout percentage requirements of this regulation.

H. A payout percentage that may be affected by reason of skill shall meet the payout percentage requirements of this regulation factoring in a method of play that provides the greatest return to a player.

I. A video lottery terminal:

  (1) May not:

    (a) Offer a winning combination where the odds exceed 50,000,000 to one; and

    (b) Alter any function based on an internal computation of payout percentage; and

  (2) Shall be designed to ensure that all possible combinations in the game cycle are independent of each other.

#### Regulation .12 Maximum Bet.

*COMAR 36.04.01.12*

A. A video lottery terminal may not accept a maximum bet on a single game event in excess of $500 without the written approval of the Commission.

B. The $500 maximum bet in §A of this regulation does not apply to a double-up option on a winning wager.

C. For an electronic table game, each wager on a separate outcome is a single game event.

#### Regulation .13 Video Lottery Terminal Lock-up.

*COMAR 36.04.01.13*

A. A video lottery terminal shall be configured to lock-up and preclude further play following a single jackpot that requires the filing of IRS Form W-2G, Certain Gambling Winnings.

B. A single jackpot event shall include the exhaustion of all available double-up and bonus wager options on a winning wager.

C. A video lottery terminal may be configured to permit the transfer, upon lock-up, of a jackpot amount to the credit meter.

#### Regulation .14 Random Number Generator.

*COMAR 36.04.01.14*

A. Definitions.

  (1) In this regulation, the following terms have the meanings indicated.

  (2) Terms Defined.

    (a) “Chi-squared analysis” means a statistical test for goodness of fit which measures the difference between a theoretical result and an observed result.

    (b) “Correlation test” means a statistical test that determines whether each card, number, symbol or stop position is independently chosen without regard to another card, number, symbol, or stop within that game play.

    (c) “Runs test” means a statistical test that determines the existence of recurring patterns within a set of data.

    (d) “Series correlation test” means a statistical test that determines whether each card, number, symbol or stop position is independently chosen without regard to another card, number, symbol, or stop in the previous game.

B. A video lottery terminal shall determine the occurrence of a specific card, number, symbol, or stop by utilizing:

  (1) One random number generator; or

  (2) Two or more random number generators working collectively.

C. A video lottery terminal’s selection process shall be considered random if it meets the following statistical requirements:

  (1) A chi-squared analysis meeting a 99 percent confidence level;

  (2) A runs test meeting a 99 percent confidence level;

  (3) A correlation test meeting a 99 percent confidence level;

  (4) A series correlation test meeting a 99 percent confidence level; and

  (5) Any other test of randomness determined appropriate by the Commission.

D. A random number generator including its random number selection process shall be designed in a manner that ensures it is impervious to:

  (1) Outside influences;

  (2) Interference from electro-magnetic, electrostatic, and radio frequencies; and

  (3) Influence from ancillary equipment by means of data communication.

E. Once a random selection process has occurred, a video lottery terminal:

  (1) Shall display an accurate representation of the randomly selected outcome; and

  (2) May not make a secondary decision which affects the result shown to the player at the video lottery terminal.

#### Regulation .15 Rules of Play.

*COMAR 36.04.01.15*

A. Definition.

  (1) In this regulation the following term has the meaning indicated.

  (2) Term Defined. “Strategy choice” means a particular play option on a video lottery terminal that requires the use of skill to consistently achieve the best result.

B. A video lottery terminal shall be equipped to display to a player while idle the:

  (1) Schedule of credits awarded with each winning combination;

  (2) Applicable rules of play; and

  (3) Any maximum bet limit imposed under Regulation .12 of this chapter.

C. The Commission may prohibit the display of any rules of play it determines to be:

  (1) Incomplete;

  (2) Confusing;

  (3) Misleading; or

  (4) Inconsistent with the rules of play required by the Commission.

D. For rules of play, the schedule of credits awarded with each winning combination may not include possible aggregate awards achievable from free plays.

E. A video lottery terminal that includes a strategy choice shall include in its rules of play mathematically sufficient information for a player to use optimal skill unless the player:

  (1) Is not required to make an additional wager; and

  (2) Cannot lose any credits earned prior to the strategy choice.

F. A manufacturer or facility operator may not attach a sticker or other removable device that concerns rules of play to the face, glass, or screen of a video lottery terminal without the prior written approval of the Commission.

#### Regulation .16 Video Lottery Terminal Meters.

*COMAR 36.04.01.16*

A. A video lottery terminal shall be equipped with:

  (1) The meter functions enumerated in §§C, D, and F of this regulation;

  (2) Meters which:

    (a) Continuously and automatically increment in credits equal to:

      (i) The denomination of the video lottery terminal; or

      (ii) Cents; and

    (b) Are accessible and legible without access to the interior of the video lottery terminal; and

  (3) A device, mechanism, or method for retaining electronically accounting data for all meters required under this regulation for a period of not less than 10 days subsequent to a power loss.

B. A video lottery terminal may not be equipped with any device, mechanism, or method which allows or causes the electronic accounting meters required under this regulation to automatically clear or zero out.

C. A video lottery terminal shall be equipped with the following cumulative meters, all of which shall be at least ten digits in length:

  (1) A coin-in meter that:

    (a) Accumulates the total number of credits wagered whether the wager involves:

      (i) Currency;

      (ii) A gaming ticket;

      (iii) A promotional play instrument;

      (iv) Downloaded credits; or

      (v) Credits won; and

    (b) Does not accumulate subsequent double-up wagers or other wagers of intermediate winnings accumulated during a game event;

  (2) A series of meters which collectively account for the number of credits won:

    (a) A coin-out meter that accumulates the total number of credits paid out automatically by the video lottery terminal as a result of winning wagers including a payout:

      (i) By gaming ticket; and

      (ii) Directly to a credit meter;

    (b) A progressive payout meter that accumulates the total number of credits paid out automatically by the video lottery terminal as a result of a progressive jackpot;

    (c) An external bonus payout meter that accumulates the total number of credits paid out automatically by the video lottery terminal as a result of an external bonusing system award;

    (d) An attendant paid jackpot meter that accumulates the total number of credits hand paid by a facility operator as the result of a single winning combination that exceeds the physical or configured capability of the video lottery terminal;

    (e) An attendant paid cancelled credit meter that accumulates the total number of credits hand paid by a facility operator as the result of a player initiated cash-out that exceeds the physical or configured capability of the video lottery terminal;

    (f) An attendant paid progressive jackpot meter that accumulates the total number of credits hand paid by a facility operator as a result of a progressive jackpot that exceeds the physical or configured capability of the video lottery terminal; and

    (g) An attendant paid external bonus payout meter that accumulates the total number of credits hand paid by a facility operator as a result of an external bonusing system award that exceeds the physical or configured capability of the video lottery terminal;

  (3) A cashable gaming ticket in count meter that accumulates the number of cashable gaming tickets accepted by a video lottery terminal;

  (4) A cashable gaming ticket in value meter that accumulates the total number of cashable credits on gaming tickets accepted by a video lottery terminal;

  (5) A cashable gaming ticket out count meter that accumulates the number of cashable gaming tickets issued by a video lottery terminal;

  (6) A cashable gaming ticket out value meter that accumulates the total number of cashable credits on gaming tickets issued by a video lottery terminal;

  (7) A noncashable gaming ticket in count meter that accumulates the number of noncashable gaming tickets accepted by a video lottery terminal;

  (8) A noncashable gaming ticket in value meter that accumulates the total number of noncashable credits on gaming tickets accepted by a video lottery terminal;

  (9) A noncashable gaming ticket out count meter that accumulates the number of noncashable gaming tickets issued by a video lottery terminal;

  (10) A noncashable gaming ticket out value meter that accumulates the total number of noncashable credits on gaming tickets issued by a video lottery terminal;

  (11) A cashable promotional play instrument in count meter that accumulates the number of cashable promotional play instruments accepted by a video lottery terminal;

  (12) A cashable promotional play instrument in value meter that accumulates the total number of cashable credits on promotional play instruments accepted by a video lottery terminal;

  (13) A noncashable promotional play instrument in count meter that accumulates the number of noncashable promotional play instruments accepted by a video lottery terminal;

  (14) A noncashable promotional play instrument in value meter that accumulates the total number of noncashable credits on promotional play instruments accepted by a video lottery terminal;

  (15) A cashable downloadable in count meter that accumulates the total number of electronic transfers involving cashable credits accepted by a video lottery terminal through a cashless funds transfer system;

  (16) A cashable downloadable in value meter that accumulates the total number of cashable credits accepted by a video lottery terminal through a cashless funds transfer system;

  (17) A cashable downloadable out count meter that accumulates the total number of electronic transfers involving cashable credits issued by a video lottery terminal to player accounts through a cashless funds transfer system;

  (18) A cashable downloadable out value meter that accumulates the total number of cashable credits issued by a video lottery terminal to player accounts through a cashless funds transfer system;

  (19) A noncashable downloadable in count meter that accumulates the total number of electronic transfers involving noncashable credits accepted by a video lottery terminal through a cashless funds transfer system;

  (20) A noncashable downloadable in value meter that accumulates the total number of noncashable credits accepted by a video lottery terminal through a cashless funds transfer system;

  (21) A noncashable downloadable out count meter that accumulates the total number of electronic transfers involving noncashable credits issued by a video lottery terminal to player accounts through a cashless funds transfer system;

  (22) A noncashable downloadable out value meter that accumulates the total number of noncashable credits issued by a video lottery terminal to player accounts through a cashless funds transfer system;

  (23) A bill in count meter than accumulates the total number of bills accepted by a video lottery terminal;

  (24) A bill in value meter than accumulates the total dollar amount of currency accepted by a video lottery terminal;

  (25) Denomination in count meters that accumulate, by denomination, the total number of bills accepted by a video lottery terminal;

  (26) Denomination in value meters that accumulate, by denomination, the total dollar amount of currency accepted by a video lottery terminal; and

  (27) Other meters required by the Commission.

D. A video lottery terminal shall be equipped with the following noncumulative meters:

  (1) A credit meter which advises a player of the total number of credits, cashable and noncashable, available for wagering on the video lottery terminal;

  (2) A credits wagered meter that advises a player of the total number of credits wagered in a particular game or round of video lottery terminal play;

  (3) A win meter that advises a player of the total number of credits won in the immediately concluded game or round of video lottery terminal play; and

  (4) A credits paid meter which advises a player of the total value of the last:

    (a) Cash out initiated by a player;

    (b) Hand paid jackpot; and

    (c) Hand paid cancelled credit.

E. The noncumulative meters required by §D of this regulation shall be:

  (1) Visible from the exterior of the video lottery terminal; and

  (2) At least eight digits in length.

F. A video lottery terminal shall be equipped with a meter at least eight digits in length which stores, in a manner and for a duration acceptable to the Commission, the number of games played after the following events:

  (1) Power reset;

  (2) Door close; and

  (3) RAM clear.

G. The Commission may approve a video lottery terminal which combines one of more of the meters enumerated in §C of this regulation if the Commission determines that the combined meters do not preclude the capture of all critical transactions occurring on a video lottery terminal.

H. If a video lottery terminal has been enabled for tournament play, the results of tournament play may not increment the cumulative meters required under §C of this regulation.

#### Regulation .17 RAM Clear.

*COMAR 36.04.01.17*

A manufacturer may not perform a RAM clear on a video lottery terminal without:

A. Prior notice to the central monitor and control system operator; and

B. Recordation and transmission to the central monitor and control system operator of accounting meter data immediately prior to the RAM clear.

#### Regulation .18 Video Lottery Terminal Tower Lights and Error Conditions.

*COMAR 36.04.01.18*

A. Definitions.

  (1) In this regulation the following terms have the meanings indicated.

  (2) Terms Defined.

    (a) “Administrative mode” means a video lottery terminal has been deliberately placed by a manufacturer in an unplayable state to access the set up or recall functions of the video lottery terminal;

    (b) “Disabled mode” means a video lottery terminal has been deliberately placed, by a manufacturer or the central monitor and control system, in an unplayable state for any reason other than access to the set up or recall functions of the video lottery terminal; and

    (c) “Tilt mode” means a video lottery terminal has placed itself in an unplayable state due to malfunction or error condition and may not be returned to a playable state without the intervention of a manufacturer.

B. A video lottery terminal shall be equipped with a tower light located at the top of its cabinet used to identify the operational status of the video lottery terminal including, but not limited to:

  (1) A jackpot payout;

  (2) A credit meter payout that exceeds the physical or configured capability of the video lottery terminal to pay;

  (3) Main door open;

  (4) Player requesting attendant services;

  (5) Administrative mode;

  (6) Disabled mode; and

  (7) Tilt mode.

C. A tower light shall be visible to:

  (1) A player; and

  (2) The facility operator’s surveillance department.

D. The tower light of a bar-top style video lottery terminal may be:

  (1) Shared among a group of video lottery terminals; or

  (2) Substituted by:

    (a) A flush-mounted light located on the top panel of the video lottery terminal;

    (b) An audible alarm; or

    (c) Other Commission-approved means of visibly or audibly identifying the operational status of the video lottery terminal.

E. The Commission may, on submission of a written request by a manufacturer, approve an alternative means for identifying the operation status enumerated in §A of this regulation.

F. A manufacturer shall deliver a video lottery terminal with documentation that identifies each light or light combination on its tower light and the operational status corresponding to that light or light combination.

G. Nothing in this regulation shall preclude a manufacturer from equipping a video lottery terminal with a light or light combinations not required by this regulation for use by a facility operator for gaming floor communication provided the manufacturer notifies the Commission in writing of any internal communication protocols involving tower lights developed by a manufacturer for a facility prior to implementation.

H. A video lottery terminal shall be equipped, while idle and in play mode, to do the following with regard to an error condition identified in §J, K, L, or M of this regulation:

  (1) Detect the error condition;

  (2) Identify the specific error condition by:

    (a) Tower light; or

    (b) Other Commission-approved means; and

  (3) Communicate the specific error condition to the:

    (a) Central monitor and control system; and

    (b) Facility operator’s video lottery terminal data system.

I. The following error conditions may be cleared automatically by the video lottery terminal upon completion of a new play sequence:

  (1) Power reset;

  (2) Door open; and

  (3) Door just closed.

J. The following error conditions shall result in placement of the video lottery terminal in disabled mode, shall prevent play and shall only be cleared by a manufacturer:

  (1) Low RAM battery;

  (2) Printer failure;

  (3) Presentation error;

  (4) Program error or defective program storage media;

  (5) Reel spin error;

  (6) Removal of the control storage media; and

  (7) RAM defective or corrupted.

K. The following error conditions shall result in placement of the video lottery terminal in disabled mode, shall prevent play and shall be cleared by a manufacturer or facility operator:

  (1) Printer mechanism paper jam; and

  (2) Bill validator jam.

L. The following error conditions need not result in placement of the video lottery terminal in disabled mode, may not preclude play if the error condition is determined not to prohibit completion of the transaction and shall be cleared by a manufacturer or facility operator:

  (1) Printer mechanism paper level is low; and

  (2) Printer mechanism is out of paper.

M. A manufacturer of a video lottery terminal shall affix a description of the error code corresponding to each error condition inside a video lottery terminal.

#### Regulation .19 Last Game Recall.

*COMAR 36.04.01.19*

A. A video lottery terminal shall be capable of recalling and displaying a complete play history for the most recent game event and at least three games immediately preceding the most recent game event.

B. The play history required by §A of this regulation shall:

  (1) Be presented in the same sequence as the original game play;

  (2) Be available when the video lottery terminal is in:

    (a) Idle mode;

    (b) Administrative mode;

    (c) Disabled mode; and

    (d) Tilt mode; and

  (3) Include:

    (a) Game outcome in graphics or text;

    (b) The base game and all intermediate play decisions;

    (c) Details sufficient to determine the credits available at the start and end of each game event;

    (d) Wagers placed per line;

    (e) Number of lines on which wagers were placed;

    (f) Credits won;

    (g) Credits cashed out;

    (h) Any progressive jackpot awarded; and

    (i) All double-up, bonus, and extended play activity.

C. Notwithstanding the requirements of §B(3) of this regulation, a video lottery terminal offering a variable number of intermediate play steps in a game event shall satisfy the requirements of this regulation if it is capable of recalling and displaying the last 50 intermediate steps in each of the four base game events retained.

D. A video lottery terminal shall be capable of recalling and displaying a complete transaction history for the last 35 transactions with an electronic funds transfer system.

#### Regulation .20 Video Lottery Terminal Entry Logs.

*COMAR 36.04.01.20*

A. Unless a request for an alternate procedure is submitted in writing and approved by the Commission, a manufacturer shall equip a video lottery terminal with a maintenance log for use in documenting each time a:

  (1) Video lottery terminal is entered; or

  (2) Device connected to a video lottery terminal which may affect the operation of the video lottery terminal is accessed.

B. A maintenance log shall be:

  (1) Signed by each individual accessing an area enumerated in §A of this regulation including representatives of a manufacturer, a contractor, a facility operator, or the Commission;

  (2) Maintained in a book with bound numbered pages that cannot be readily removed, or in a functional equivalent that has been reviewed and approved by the Commission:

    (a) In the main cabinet of the video lottery terminal; and

    (b) On the cover of which are fields to record:

      (i) The video lottery terminal’s manufacturer’s serial number;

      (ii) Commission asset number; and

      (iii) A log book sequence number;

  (3) Utilized to document the following:

    (a) Date and time of entry;

    (b) Entering individual's signature;

    (c) Reason for entering the video lottery terminal including the identification of areas inspected or repaired; and

  (4) Retained by a facility operator for a minimum of 3 years from the date of the last entry unless a request for destruction is submitted in writing and approved in writing by the Commission.

C. A manufacturer shall equip a progressive controller not housed within the cabinet of a video lottery terminal with a maintenance log which documents each time the Commission-approved compartment in which the progressive controller resides is accessed which is:

  (1) Signed by each individual accessing the compartment housing the progressive controller including representatives of a manufacturer, a contractor, a facility operator, or the Commission;

  (2) Maintained in a book with bound numbered pages that cannot be readily removed:

    (a) In the Commission-approved compartment in which the progressive controller resides; and

    (b) On the cover of which are fields to record:

      (i) The progressive controller’s manufacturer’s serial number;

      (ii) Commission asset number; and

      (iii) A log book sequence number;

  (3) Utilized to document the following:

    (a) Date and time of entry to the compartment housing the progressive controller;

    (b) Entering individual's signature;

    (c) Reason for entering the compartment housing the progressive controller including the identification of areas inspected or repaired; and

  (4) Retained by a facility operator for a minimum of 3 years from the date of the last entry unless a request for destruction is submitted in writing and approved in writing by the Commission.

#### Regulation .21 Video Lottery Terminal Security.

*COMAR 36.04.01.21*

A. If a manufacturer ships a video lottery terminal with software already installed, prior to transporting it the manufacturer shall seal the video lottery terminal with a prenumbered seal.

B. Access to the main door securing the interior of a video lottery terminal shall be controlled by at least one lock:

  (1) The key to which is:

    (a) Different from any other key securing access to a video lottery terminal component including a:

      (i) Belly door;

      (ii) Bill validator; or

      (iii) Cash storage box; and

    (b) Limited to access by a:

      (i) Manufacturer; and

      (ii) Facility operator; and

  (2) Provided and installed by a facility operator except a facility operator may supply a manufacturer with a lock for installation during the manufacturing process.

C. Access to the logic door securing the video lottery terminal’s main processing unit shall be controlled by at least one lock:

  (1) The key to which is:

    (a) Different from any other key securing access to a video lottery terminal component including a:

      (i) Belly door;

      (ii) Bill validator; or

      (iii) Cash storage box; and

    (b) Limited to access by a:

      (i) Manufacturer; and

      (ii) Facility operator; and

  (2) Provided and installed by a facility operator, except a facility operator may supply a manufacturer with a lock for installation during the manufacturing process.

D. Locks to a bill validator and a cash storage box shall be:

  (1) Accessed and controlled in accordance with COMAR 36.03.10.42; and

  (2) Provided and installed by a facility operator except a facility operator may supply a manufacturer with a lock for installation during the manufacturing process.

E. A video lottery terminal shall be designed with access to hardware switches controlling functions critical to the operation of a video lottery terminal limited to access by a manufacturer and the Commission including, but not limited to, switches, jumpers, and other mechanisms utilized to alter:

  (1) Pay tables;

  (2) Payout percentages; and

  (3) Meters.

F. A video lottery terminal shall have:

  (1) Printed or affixed to the top and front of the video lottery terminal, in a size suitable for effective surveillance coverage:

    (a) The facility operator’s gaming floor location number; and

    (b) Commission asset number; and

  (2) An identification plate on its exterior displaying the:

    (a) Manufacturer; and

    (b) Manufacturer’s:

      (i) Serial number; and

      (ii) Model number.

#### Regulation .22 Minimum Design Standards Applicable to Equipment, a System, or Software.

*COMAR 36.04.01.22*

A. Equipment, a system, or software required to be tested, certified, and approved under this chapter shall:

  (1) Conform to the minimum design standards of this regulation; and

  (2) If applicable, conform to any specific additional design standards enumerated in this chapter.

B. Equipment, a system, or software required to be tested, certified, and approved under this chapter shall, at a minimum, control logical access through:

  (1) Generation of daily monitoring logs documenting:

    (a) User access; and

    (b) Security incidents;

  (2) Assignment of rights and privileges to an individual user including specific protocols addressing:

    (a) Creation, modification, and termination of a unique system account for each user;

    (b) Password parameters which:

      (i) Require a minimum length;

      (ii) Incorporate an expiration interval; and

      (iii) Result in lockout; and

    (c) Administrator and override capabilities;

  (3) Use of access permissions to restrict an unauthorized user from performing any the following with regard to critical files and directories:

    (a) Reading;

    (b) Altering; or

    (c) Deleting; and

  (4) Restricted access to critical files and directories through:

    (a) Encryption; or

    (b) If approved by the Commission, internal controls provided the internal controls include:

      (i) The effective segregation of duties and responsibilities with regard to the system; and

      (ii) The automatic monitoring and recording by the system of access by an individual to its files and directories.

C. Equipment, a system or software required to be tested, certified, and approved under this chapter shall, at a minimum, control system operations through:

  (1) Generation of daily monitoring logs and alert messages documenting:

    (a) System performance;

    (b) Hardware problems; and

    (c) Software errors;

  (2) Authentication of the source of a data transmission;

  (3) Transmission completeness and accuracy checks;

  (4) Detection of corrupt or lost data packets;

  (5) Rejection of a transmission;

  (6) Use of cryptographic controls for critical transmissions of data; and

  (7) Daily synchronization of its real time clock with that of equipment, systems, or software to which it is linked.

D. Equipment, a system, or software required to be tested, certified, and approved under this chapter shall, at a minimum, control the integrity of data through:

  (1) Validation of inputs to critical fields including data:

    (a) Type; and

    (b) Format;

  (2) Rejection of corrupt data;

  (3) Automatic and independent recordation of critical data;

  (4) Independent verification of the accuracy of data; and

  (5) Segregation of all security critical system programs, files, and directories from other programs, files, and directories.

E. Equipment, a system, or software required to be tested, certified, and approved under this chapter shall, at a minimum, ensure continuity through:

  (1) Data redundancy to permit a complete and prompt recovery of all information in the event of malfunction or power interruption; and

  (2) Environmental protections, including an uninterruptible power supply to protect critical hardware.

#### Regulation .23 Video Lottery Terminal — Additional Requirements.

*COMAR 36.04.01.23*

A. A manufacturer shall configure a video lottery terminal to wager credits available for play in the following order:

  (1) Noncashable credits; and

  (2) Cashable credits.

B. A manufacturer may enable a video lottery terminal that has been tested, certified, and approved under this chapter for tournament play with the prior written approval of the Commission.

#### Regulation .24 Gaming Ticket System — Additional Requirements.

*COMAR 36.04.01.24*

A. A facility operator shall utilize a gaming ticket system that has been tested, certified, and approved under this chapter.

B. A facility operator shall, in a form and in a time frame specified by the Commission, submit a report to the Commission detailing any adjustment made to the amount of a gaming ticket.

C. In addition to complying with the minimum design standards of Regulation .22 of this chapter, a gaming ticket system shall:

  (1) Authenticate the source of a data transmission by identifying whether a transmission originated with a:

    (a) Video lottery terminal;

    (b) Ticket redemption unit; or

    (c) Cashiers’ cage redemption location;

  (2) Use cryptographic controls for transmissions that include:

    (a) A gaming ticket series number;

    (b) Meter information; and

    (c) Other information used in the calculation or verification of proceeds;

  (3) Control the integrity of data through generation of a unique series number on a gaming ticket:

    (a) Comprised of at least 18 numbers, symbols, or characters;

    (b) Containing at least three numbers, symbols, or characters:

      (i) Randomly generated in a manner approved by the Commission; and

      (ii) Designed to prevent an individual from being able to predict the series number of any other gaming ticket;

    (c) Containing at least one number, symbol, or character unique to a gaming ticket which visually differentiates between a gaming ticket and a promotional play instrument; and

    (d) Printed in at least two locations on a gaming ticket;

  (4) Automatically and independently record the critical data required to be printed on a gaming ticket under COMAR 36.03.10.36 at the time of gaming ticket:

    (a) Generation; and

    (b) Redemption; and

  (5) Independently verify, in a manner satisfactory to the Commission, the accuracy of a gaming ticket series number and amount prior to redemption.

#### Regulation .25 Ticket Redemption Unit — Additional Requirements.

*COMAR 36.04.01.25*

A. A facility operator may utilize a ticket redemption unit that has been tested, certified, and approved under this chapter.

B. In addition to complying with the minimum design standards of Regulation .22 of this chapter, a ticket redemption unit shall, in a manner satisfactory to the Commission:

  (1) Establish the validity of a gaming ticket or promotional play instrument by comparing the unique series number on the ticket or instrument with electronic records in a gaming ticket system or promotional play system;

  (2) Cancel upon acceptance a gaming ticket or promotional play instrument to prevent:

    (a) Subsequent redemption at a:

      (i) Cashiers' cage; or

      (ii) Another ticket redemption unit; or

    (b) Acceptance by a video lottery terminal; and

  (3) Evaluate whether sufficient funds are available before accepting the gaming ticket or promotional play instrument and completing the transaction.

C. The following error conditions may be cleared automatically by a ticket redemption unit upon completion of a new transaction.

  (1) Power reset;

  (2) Door open;

  (3) Door closed; and

  (4) System communication loss.

D. The following error conditions shall result in placement of the ticket redemption unit in disabled mode, shall prevent new transactions and shall only be cleared by a facility operator:

  (1) Failure to make payment, meaning that a gaming ticket or promotional play instrument was returned and no receipt for an unpaid amount was issued;

  (2) Failure to make complete payment, meaning no receipt for an unpaid amount was issued;

  (3) Bill validator failure; and

  (4) Printer failure due to printer jam or lack of paper.

E. A ticket redemption unit shall be equipped with:

  (1) The meters enumerated in §F of this regulation;

  (2) Meters which continuously and automatically increment in credits equal to cents; and

  (3) An automated transaction log retaining all critical transaction history required under this regulation for a period of not less than 10 days subsequent to a power loss.

F. A ticket redemption unit shall be equipped with electronic meters that function as follows:

  (1) A cashable gaming ticket in count meter that accumulates the number of cashable gaming tickets accepted by a ticket redemption unit;

  (2) A cashable gaming ticket in value meter that accumulates the total number of credits on cashable gaming tickets accepted by a ticket redemption unit;

  (3) A cashable promotional play instrument in count meter that accumulates the number of cashable promotional play instruments accepted by a ticket redemption unit;

  (4) A cashable promotional play instrument in value meter that accumulates the total number of credits on cashable promotional play instruments accepted by a ticket redemption unit;

  (5) Bill denomination in count meters that accumulate, by denomination, the total number of bills accepted by a ticket redemption unit;

  (6) Bill denomination in value meters that accumulate, by denomination, the total dollar amount of currency accepted by a ticket redemption unit;

  (7) Bill denomination out count meters that accumulate, by denomination, the total number of bills dispensed by a ticket redemption unit;

  (8) Bill denomination – out value meters that accumulate, by denomination, the total dollar amount of currency dispensed by a ticket redemption unit; and

  (9) Other meters required by the Commission.

G. The automated transaction log required under §E(3) of this regulation shall include for each transaction, whether complete or incomplete, the following:

  (1) Date and time;

  (2) Amount;

  (3) Disposition as complete or incomplete;

  (4) Error conditions including failed access attempts;

  (5) User access data; and

  (6) If equipped to redeem multiple cashable gaming tickets and cashable promotional play instruments in a single transaction, a breakdown of the transaction by individual cashable gaming ticket and cashable promotional play instrument.

#### Regulation .26 External Bonusing System — Additional Requirements.

*COMAR 36.04.01.26*

A. A facility operator may utilize an external bonusing system that has been tested, certified, and approved under this chapter.

B. In addition to complying with the minimum design standards of Regulation .22 of this chapter, a video lottery terminal connected to an external bonusing system may not equal or exceed an average payout percentage of 100 percent when the contribution of any bonus awards available on a video lottery terminal is added to the video lottery terminal’s average payout percentage.

#### Regulation .27 Cashless Funds Transfer System — Additional Requirements.

*COMAR 36.04.01.27*

A. A facility operator may utilize a cashless funds transfer system that has been tested, certified, and approved under this chapter.

B. A facility operator shall, in a form and in a time frame specified by the Commission, submit a report to the Commission detailing any adjustment made to the amount of a credit transferred to or from a video lottery terminal, table game, or wagering account by means of a cashless funds transfer system.

C. A facility operator utilizing a cashless funds transfer system shall develop and include in the internal controls submitted to and approved by the Commission under COMAR 36.03.10.05 procedures addressing the integrity, security, and control of a cashless funds transfer system.

D. A facility operator’s internal controls shall address:

  (1) Set-up and administration of a player account including:

    (a) The procedures utilized to create a unique access code to, and a unique player identification number for, a player account; and

    (b) The controls employed to secure a player’s access code;

  (2) The intended scope of use of a cashless funds transfer system including whether it will be used to:

    (a) Transfer credits to a video lottery terminal, table game, or wagering account; and

    (b) Transfer credits from a video lottery terminal, table game, or wagering account to a player account; and

  (3) Documentation of individual player transactions including a requirement that:

    (a) Each transaction is identified, at a minimum, by:

      (i) Date and time;

      (ii) Video lottery terminal manufacturer serial number or Commission asset number, table game number, or wagering account number; and

      (iii) The player’s account identification number;

    (b) A statement of player account activity is available to a player on:

      (i) Submission of a signed request for the statement at the cashiers’ cage; and

      (ii) Establishing the identification of the player including the authenticity of the player’s signature on the request for the statement in accordance with the signature authentication procedures in COMAR 36.03.10.20;

    (c) The statement of player account activity required under this regulation summarize, at a minimum, a player’s activity during the month prior to the date of the request for a statement and include:

      (i) Player’s beginning credit balance;

      (ii) Credits earned during the month;

      (iii) Credits transferred to a video lottery terminal, table game, or wagering account;

      (iv) Credits transferred from a video lottery terminal, table game, or wagering account to a player account; and

      (v) Player’s ending credit balance; and

    (d) The statement of player account activity required under this regulation need not include promotional play credits transferred to a player without regard to the identity of the player.

#### Regulation .28 Progressive Video Lottery Terminals.

*COMAR 36.04.01.28*

A. A video lottery terminal offering a progressive jackpot may:

  (1) Stand alone; or

  (2) Be linked to:

    (a) Other video lottery terminals in a facility; or

    (b) Video lottery terminals in two or more facilities in or outside the State through a wide area progressive system under Regulation .29 of this chapter.

B. A manufacturer may not install in a facility, and a facility operator may not make available for play, a video lottery terminal offering a progressive jackpot without Commission approval in writing of:

  (1) A progressive proposal under Regulation .30 of this chapter; and

  (2) Internal controls submitted under COMAR 36.03.10.05 addressing the payment of a progressive jackpot.

C. A manufacturer may not modify the terms of a progressive jackpot, and a facility operator may not make available for play, a video lottery terminal which offers a progressive jackpot that differs from its approved progressive proposal without the approval in writing of the Commission under Regulation .30B of this chapter.

D. A video lottery terminal may offer multiple progressive jackpots.

E. A progressive jackpot amount may be calculated and transmitted to a video lottery terminal by:

  (1) The operating system of a video lottery terminal; or

  (2) A separate progressive controller interfaced to a video lottery terminal.

F. A progressive controller shall be:

  (1) Located in a:

    (a) Restricted area; or

    (b) Video lottery terminal;

  (2) Secured:

    (a) In a dual key controlled compartment with:

      (i) One key controlled by the operations department; and

      (ii) One key controlled by the security department; or

    (b) By alternative means approved by the Commission; and

  (3) Capable of:

    (a) Displaying an available progressive jackpot amount on a video lottery terminal’s:

      (i) Progressive meter; or

      (ii) Common progressive meter;

    (b) Transmitting to a video lottery terminal for metering purposes the amount of a progressive jackpot;

    (c) If linked to a common progressive meter in accordance with §H of this regulation, displaying the Commission asset number of the video lottery terminal on which a progressive jackpot is won;

    (d) If a progressive controller is servicing multiple video lottery terminals, automatically resetting all video lottery terminals connected to it to a pre-established reset amount; and

    (e) If the progressive offers multiple jackpot levels, maintaining and displaying for each progressive level the:

      (i) Number of progressive jackpots won;

      (ii) Cumulative amount paid;

      (iii) Maximum progressive payout;

      (iv) Minimum amount or reset amount; and

      (v) Rate of progression.

G. A video lottery terminal offering a progressive jackpot shall be equipped, for each progressive jackpot offered, with the following mechanical, electrical, or electronic meters:

  (1) A progressive meter which:

    (a) May increase in value based upon wagers;

    (b) Advises the player of the amount which may be won if the video lottery terminal characters that result in the award of a progressive jackpot appear as a result of activation of play; and

    (c) Is visible from the front of the video lottery terminal through:

      (i) A meter display housed in the video lottery terminal; or

      (ii) A common progressive meter display unit;

  (2) A progressive payout meter under Regulation .16C(2)(b) of this chapter;

  (3) An attendant paid progressive jackpot meter under Regulation .16C(2)(f) of this chapter; and

  (4) A cumulative progressive payout meter that continuously and automatically records the total value of progressive jackpots paid whether paid:

    (a) Directly by the video lottery terminal; or

    (b) Hand paid by a facility operator as a result of a progressive jackpot that exceeds the physical or configured capability of a video lottery terminal.

H. A video lottery terminal linked to a common progressive meter for the purpose of offering the same progressive jackpot on two or more video lottery terminals shall:

  (1) Have the same probability of hitting the combination of characters that will award the progressive jackpot as every other video lottery terminal linked to that common progressive meter; and

  (2) Require each:

    (a) Player to wager the same amount to receive a chance at winning the progressive jackpot; and

    (b) Wager to increment the progressive meter by the same rate of progression on every video lottery terminal connected to the common progressive meter.

I. Notwithstanding the requirements of §H of this regulation, video lottery terminals linked to a common progressive meter for the purpose of offering the same progressive jackpot on two or more video lottery terminals may be of different denominations or require different wagers, or both, if:

  (1) The probability of winning the progressive jackpot is directly proportional to the wager required to win a jackpot; and

  (2) A notice indicating the proportional probability of hitting the progressive jackpot on the common progressive meter is conspicuously displayed in a manner specified by the Commission on each linked video lottery terminal.

J. A manufacturer may not:

  (1) Set a limit for a progressive jackpot which exceeds the display capability of the progressive meter; or

  (2) Adjust a progressive meter without the prior approval of the Commission unless the adjustment is:

    (a) Required as a direct result of video lottery terminal or meter malfunction; and

    (b) Reported by the manufacturer in a form and in a time frame specified by the Commission to the:

      (i) Commission; and

      (ii) Facility operator.

#### Regulation .29 Wide Area Progressive System.

*COMAR 36.04.01.29*

A. A manufacturer may not install, and a facility operator may not make available for play, a wide area progressive system without Commission approval in writing of:

  (1) A wide area progressive agreement under §C of the regulation;

  (2) A progressive proposal under Regulation .30 of this chapter; and

  (3) Internal controls submitted under COMAR 36.03.10.05 addressing the payment of a progressive jackpot on a video lottery terminal participating in a wide area progressive system.

B. A manufacturer may not modify the terms of a progressive jackpot offered through a wide area progressive system, and a facility operator may not make available for play, a video lottery terminal which offers a progressive jackpot that differs from its approved progressive proposal without the approval in writing of the Commission under Regulation .30(B) of this chapter.

C. A wide area progressive system shall operate under the terms and conditions of a wide area progressive agreement between:

  (1) The Commission;

  (2) A manufacturer; and

  (3) Participating facility operators in or outside the State.

D. A wide area progressive agreement shall assign responsibility for the operation and administration of a wide area progressive system to a designated system operator who may be a:

  (1) Participating facility operators in or outside the State; or

  (2) Manufacturer.

E. A wide area progressive agreement shall address:

  (1) The duties and responsibilities of the:

    (a) Participating:

      (i) Manufacturer; and

      (ii) Facility operators in or outside the State; and

    (b) System operator;

  (2) The terms of compensation for a system operator including to what extent the system operator is to receive compensation based, directly or indirectly, on an interest, percentage or share of the proceeds of a wide area progressive system;

  (3) Responsibility for progressive jackpots, proceeds, and expenses associated with the operation of a wide area progressive system;

  (4) Control and operation of a system monitor room under §F of this regulation;

  (5) Service and maintenance of a wide area progressive system;

  (6) Responsibility for generating, filing and maintaining the records and reports required under this subtitle;

  (7) If applicable, terms with regard to establishing and servicing any trust agreement associated with an annuity jackpot offered by a wide area progressive system under COMAR 36.03.10.39; and

  (8) If requested by the Commission, additional documentation with regard to a wide area progressive agreement.

F. A wide area progressive system shall be controlled and operated from a system monitor room:

  (1) Under the sole possession of, and maintained and operated by, the system operator designated in a wide area progressive agreement;

  (2) In a location approved by the Commission;

  (3) If required by the Commission, staffed by individuals licensed as gaming employees; and

  (4) Subject to:

    (a) Surveillance coverage satisfactory to the Commission; and

    (b) Access controls satisfactory to the Commission including a monitor room access log in accordance with §G of this regulation.

G. A system operator shall maintain a monitor room access log:

  (1) Signed by each individual entering the system monitor room except an employee of a system operator assigned to the system monitor room on his assigned shift;

  (2) Maintained in a book with bound numbered pages that cannot be readily removed;

  (3) Utilized to document the following:

    (a) Date and time of entry;

    (b) Entering individual's signature; and

    (c) Reason for entering the system monitor room including the identification of areas inspected or repaired; and

  (4) Retained by a system operator for a minimum of 3 years from the date of the last entry unless a request for destruction is submitted in writing and approved in writing by the Commission.

#### Regulation .30 Progressive Proposal.

*COMAR 36.04.01.30*

A. A progressive proposal:

  (1) Shall be jointly prepared, executed, and submitted to the Commission by a facility operator and a manufacturer;

  (2) Shall include the following:

    (a) Manufacturer’s:

      (i) Serial number;

      (ii) Model number;

      (iii) Software identification number; and

      (iv) Version number;

    (b) Denomination or a designation as multi-denomination;

    (c) Cabinet style;

    (d) An indication as to whether the video lottery terminal is to be:

      (i) Stand alone;

      (ii) Linked to other video lottery terminals in a facility; or

      (iii) Linked to a wide area progressive system;

    (e) The initial and reset amounts at which the progressive meter or meters will be set;

    (f) For each progressive jackpot the:

      (i) Rate of progression;

      (ii) Limit; and

      (iii) Probability of winning; and

    (g) If requested by the Commission, additional documentation; and

  (3) May be approved in writing by the Commission.

B. A manufacturer may not modify the terms of a progressive jackpot, and a facility operator may not make available for play, a video lottery terminal which offers a progressive jackpot that differs from its approved progressive proposal without:

  (1) Submission to the Commission, in a time frame specified by the Commission, of a request for modification of an approved progressive proposal identifying any proposed change to the terms and conditions of the progressive proposal to be modified; and

  (2) The approval in writing of the Commission.

C. The Commission may consider the following modifications to an approved progressive proposal:

  (1) A revision to the payout limit on an available progressive jackpot, provided the revised payout limit is greater than the then current payout amount on the progressive jackpot meter;

  (2) Transfer of an available progressive jackpot amount in accordance with §D of this regulation;

  (3) Removal from the gaming floor of a video lottery terminal offering a progressive jackpot in accordance with §E of this regulation; and

  (4) Other modifications deemed consistent with this regulation by the Commission.

D. A transfer of an available progressive jackpot amount under §C(2) of this regulation shall involve:

  (1) The entire amount;

  (2) Transfer to the:

    (a) Progressive meter of a video lottery terminal with the same:

      (i) Or greater probability of winning the progressive jackpot;

      (ii) Or lower wager requirement to be eligible to win the progressive jackpot; and

      (iii) Type of progressive jackpot award; or

    (b) Progressive meters of two separate video lottery terminals provided each terminal to which a jackpot amount is transferred individually satisfies the requirements of §D(2)(a) of this regulation; and

  (3) Disclosure of the intent to transfer an available progressive jackpot amount on the front of a video lottery terminal in a manner specified by the Commission for at least 14 days prior to the intended date of transfer.

E. Removal from the gaming floor of a video lottery terminal offering a progressive jackpot under §C(3) of this regulation shall require:

  (1) If the removal involves one or more linked video lottery terminals offered in:

    (a) A single facility, that at least two linked video lottery terminals offering the same progressive jackpot remain on the gaming floor; and

    (b) More than one facility, that the facility operator retain at least one linked video lottery terminal offering the same progressive jackpot on its gaming floor; and

  (2) In every case, disclosure of the intent to transfer an available progressive jackpot on the front of a video lottery terminal in a manner specified by the Commission for at least 14 days prior to the intended date of transfer.

F. Nothing in this regulation shall preclude the Commission from imposing additional terms and conditions on a modification of a progressive proposal.

#### Regulation .31 Remote Access.

*COMAR 36.04.01.31*

A. A manufacturer may not perform from a remote location analysis of, or technical support with regard to, a video lottery terminal without:

  (1) Submission of a written request to the Commission; and

  (2) The written approval of the Commission.

B. A manufacturer may perform from a remote location analysis of, or technical support with regard to, a facility operator’s video lottery systems including, but not limited to, a:

  (1) Gaming ticket system;

  (2) Promotional play system;

  (3) Player tracking system;

  (4) External bonusing system;

  (5) Cashless funds transfer system; and

  (6) Wide area progressive system.

C. A facility operator intending to authorize remote access to a video lottery system under this regulation shall include in its internal controls submitted for Commission approval under COMAR 36.03.10.05 a written system of access protocols which require:

  (1) A unique system account for each employee of a manufacturer identified by the manufacturer as potentially required to perform technical support from a remote location;

  (2) Use of a dedicated and secure communication facility;

  (3) The facility operator to provide the Commission with notice of access within 4 hours after a person remotely accesses a system;

  (4) The facility operator to take affirmative steps, on a per access basis, to activate a manufacturer’s access privileges;

  (5) Imposition of limits on the ability of any individual authorized under this regulation to deliberately or inadvertently interfere with:

    (a) The normal operation of the system; and

    (b) Its data; and

  (6) An access log:

    (a) Maintained by both the:

      (i) Manufacturer; and

      (ii) Facility operator’s information technology department;

    (b) Maintained in:

      (i) A book with bound numbered pages that cannot be readily removed; or

      (ii) An electronic format equipped with software that prevents modification of an entry after it has been initially entered into the system; and

    (c) Documenting the:

      (i) Manufacturer version number of the system accessed;

      (ii) Type of connection as leased line, dial in modem, or private WAN;

      (iii) Name of the manufacturer employee remotely accessing the system;

      (iv) Name of the information technology department employee activating the manufacturer's access to the system;

      (v) Date and time of the connection;

      (vi) Duration of the connection;

      (vii) Reason for the remote access including a description of the symptoms or malfunction prompting the need for remote access to the system; and

      (viii) Any action taken or further action required.

D. A facility operator may not authorize a manufacturer to remotely access a video lottery system until its system access protocols are approved in writing by the Commission.

E. Any modification to a system required to be tested, certified, and approved by the Commission under Regulation .02E of this chapter shall be processed as:

  (1) An emergency modification under Regulation .07 of this chapter; or

  (2) A standard modification under Regulations .03C and .04C of this chapter.

F. If an employee of a manufacturer is no longer employed or authorized by a manufacturer to remotely access a system pursuant to this regulation, the manufacturer shall:

  (1) Immediately notify in writing:

    (a) Any facility operator that has established a unique system account for that employee of the change in authorization; and

    (b) The Commission; and

  (2) Verify with each facility operator notified of the change in authorization that the access privileges of the individual have been revoked.

#### Regulation .32 Manufacturer Storage of Equipment, Systems, and Software Outside a Facility.

*COMAR 36.04.01.32*

A. A manufacturer may not utilize a location outside of a facility to store or repair equipment, systems, software, or related parts and inventory for use in a facility without the storage facility being:

  (1) Inspected by the Commission; and

  (2) Approved in writing by the Commission.

B. A manufacturer shall locate a storage facility in Maryland in a location or locations that reasonably permit the delivery of the support and technical services to which the manufacturer is obligated.

C. A manufacturer shall submit to the Commission a written request to utilize a storage facility under §A of this regulation which includes, at a minimum:

  (1) The address;

  (2) A physical description of the storage facility;

  (3) Specifications for the surveillance system that has been or will be installed at the proposed storage facility including:

    (a) If digital:

      (i) Recording frames per second; and

      (ii) Common image rate; and

    (b) Proposed recording retention schedule; and

  (4) Security procedures for the storage facility.