<?xml version='1.0' encoding='utf-8'?>
<regulation prefix="Regulation" num=".04" citation="COMAR 36.10.18.04" title_num="36" subtitle_num="10" chapter_num="18" heading="Geolocation Systems.">
  <paragraph num="A.">
    <text>A sports wagering licensee shall keep its geolocation system up to date by integrating current solutions in real time that can detect the use of:</text>
    <paragraph num="(1)">
      <text>Remote desktop software;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Rootkits;</text>
    </paragraph>
    <paragraph num="(3)">
      <text>Virtualization; and</text>
    </paragraph>
    <paragraph num="(4)">
      <text>Any other programs identified by the Commission as having the ability to circumvent geolocation measures.</text>
    </paragraph>
  </paragraph>
  <paragraph num="B.">
    <text>The sports wagering licensee shall continually review the integrity of the geolocation system to ensure that the system detects and mitigates existing and emerging location fraud risks.</text>
  </paragraph>
  <paragraph num="C.">
    <text>A sports wagering platform shall utilize a geolocation system to:</text>
    <paragraph num="(1)">
      <text>Reasonably detect the physical location of an individual attempting to access the sports wagering platform and place a sports wager; and</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Monitor and block attempts to place an online sports wager when an individual is not within the State.</text>
    </paragraph>
  </paragraph>
  <paragraph num="D.">
    <text>The geolocation system required by §C of this regulation shall:</text>
    <paragraph num="(1)">
      <text>Ensure that a bettor:</text>
      <paragraph num="(a)">
        <text>Is located within the State when placing a sports wager; and</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Can dynamically monitor the bettors location; and</text>
      </paragraph>
    </paragraph>
    <paragraph num="(2)">
      <text>Block unauthorized attempts to place a sports wager when an individual is not within the State.</text>
    </paragraph>
  </paragraph>
  <paragraph num="E.">
    <text>A sports wagering licensee shall:</text>
    <paragraph num="(1)">
      <text>Prior to commencing operations, and annually thereafter, ensure:</text>
      <paragraph num="(a)">
        <text>Its geolocation system is tested by a Commission approved testing laboratory; and</text>
      </paragraph>
      <paragraph num="(b)">
        <text>A report on the annual testing is submitted to the Commission no later than 120 days after the end of the licensee’s fiscal year;</text>
      </paragraph>
    </paragraph>
    <paragraph num="(2)">
      <text>Ensure that testing of the geolocation system includes:</text>
      <paragraph num="(a)">
        <text>Attempts to place wagers at locations from outside of the State from multiple locations within varying distances from the State border;</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Attempts to place wagers at locations within the State from multiple locations within varying distances from the State border; and</text>
      </paragraph>
      <paragraph num="(c)">
        <text>Attempts to place wagers in which the tester crosses the State border;</text>
      </paragraph>
    </paragraph>
    <paragraph num="(3)">
      <text>For all geolocation testing, ensure that the frequency of geolocation check is documented and tested;</text>
    </paragraph>
    <paragraph num="(4)">
      <text>Ensure that testing confirms that a geolocation check occurs immediately upon a change of IP address;</text>
    </paragraph>
    <paragraph num="(5)">
      <text>Ensure that testing includes static and mobile connections; and</text>
    </paragraph>
    <paragraph num="(6)">
      <text>Ensure that testing is completed on all device types using the most prevalent versions available.</text>
    </paragraph>
  </paragraph>
  <paragraph num="F.">
    <text>A sports wagering licensee shall grant the Commission read only access to its geolocation system as required by the Commission.</text>
  </paragraph>
  <paragraph num="G.">
    <text>In addition to the requirements in this regulation, the Commission may require a sports wagering licensee to implement other geolocation features.</text>
  </paragraph>
</regulation>