<?xml version='1.0' encoding='utf-8'?>
<regulation prefix="Regulation" num=".05" citation="COMAR 36.10.18.05" title_num="36" subtitle_num="10" chapter_num="18" heading="Bettor Accounts.">
  <paragraph num="A.">
    <text>Only a registered bettor may place an online wager.</text>
  </paragraph>
  <paragraph num="B.">
    <text>The sports wagering licensee shall record and maintain the information necessary to initiate a bettor account for a period of 5 years.</text>
  </paragraph>
  <paragraph num="C.">
    <text>The information recorded and maintained under §B of this regulation shall include:</text>
    <paragraph num="(1)">
      <text>Bettors legal name;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Bettors date of birth;</text>
    </paragraph>
    <paragraph num="(3)">
      <text>Bettors residential address and mailing address if different;</text>
    </paragraph>
    <paragraph num="(4)">
      <text>Bettors phone number;</text>
    </paragraph>
    <paragraph num="(5)">
      <text>Bettors active email address;</text>
    </paragraph>
    <paragraph num="(6)">
      <text>Bettors social security number or equivalent as approved by the Commission;</text>
    </paragraph>
    <paragraph num="(7)">
      <text>Verification that the bettor is permitted to place a wager;</text>
    </paragraph>
    <paragraph num="(8)">
      <text>Sources of identification authentication, which may include:</text>
      <paragraph num="(a)">
        <text>Type and identification number of any government-issued credentials provided; or</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Other methodology for remote, multi-source authentication including third-party and governmental databases, as approved by the Commission; and</text>
      </paragraph>
    </paragraph>
    <paragraph num="(9)">
      <text>Any other information required by the Commission.</text>
    </paragraph>
  </paragraph>
  <paragraph num="D.">
    <text>A sports wagering licensee shall record:</text>
    <paragraph num="(1)">
      <text>A bettors acceptance of the sports wagering licensees:</text>
      <paragraph num="(a)">
        <text>Sports wagering terms and conditions; and</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Privacy policy; and</text>
      </paragraph>
    </paragraph>
    <paragraph num="(2)">
      <text>The bettors acknowledgment that:</text>
      <paragraph num="(a)">
        <text>The bettor has provided the sports wagering licensee accurate information; and</text>
      </paragraph>
      <paragraph num="(b)">
        <text>The bettor is prohibited from allowing any other person to access or use the bettors bettor account.</text>
      </paragraph>
    </paragraph>
  </paragraph>
  <paragraph num="E.">
    <text>Verification of Transactions on a Bettor Account.</text>
    <paragraph num="(1)">
      <text>For each deposit or withdrawal on a bettor account, a sports wagering licensee shall determine if the information provided by the bettor:</text>
      <paragraph num="(a)">
        <text>Is inconsistent with the funding information previously provided by the bettor;</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Fails to verify the identity of the bettor; or</text>
      </paragraph>
      <paragraph num="(c)">
        <text>Violates the sports wagering licensees terms and conditions.</text>
      </paragraph>
    </paragraph>
    <paragraph num="(2)">
      <text>Within 24 hours after a condition set forth in §E(1) occurs, the sports wagering licensee shall require the submission of additional information from the bettor that:</text>
      <paragraph num="(a)">
        <text>Verifies the bettors:</text>
        <paragraph num="(i)">
          <text>Identity; or</text>
        </paragraph>
        <paragraph num="(ii)">
          <text>Fund deposit or withdrawal information; or</text>
        </paragraph>
      </paragraph>
      <paragraph num="(b)">
        <text>Remedies the violation of the sports wagering licensees terms and conditions.</text>
      </paragraph>
    </paragraph>
    <paragraph num="(3)">
      <text>If the information provided by the bettor pursuant to §E(2) of this regulation does not provide the proper verification or remedy the violation, the sports wagering licensee shall:</text>
      <paragraph num="(a)">
        <text>Immediately suspend the bettor account;</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Prohibit the bettor from placing any wagers;</text>
      </paragraph>
      <paragraph num="(c)">
        <text>Submit any winnings attributable to the bettor to the Commission for distribution to the States Problem Gambling Treatment and Support Fund;</text>
      </paragraph>
      <paragraph num="(d)">
        <text>Refund the balance of deposits made to the account to the source of such deposit or by issuance of a check; and</text>
      </paragraph>
      <paragraph num="(e)">
        <text>Deactivate the account.</text>
      </paragraph>
    </paragraph>
  </paragraph>
  <paragraph num="F.">
    <text>Creation of a Bettor Account.</text>
    <paragraph num="(1)">
      <text>A sports wagering licensee shall notify the bettor of the creation of the bettor account by email, text message, or first-class mail.</text>
    </paragraph>
    <paragraph num="(2)">
      <text>When a bettor account is created, the bettor or sports wagering licensee shall establish a unique username and password for the bettor authorized to use the bettor account that prevents unauthorized access to the bettor account by an individual other than the bettor.</text>
    </paragraph>
    <paragraph num="(3)">
      <text>A sports wagering licensee shall implement a required multi-factor authentication process for all bettor accounts.</text>
    </paragraph>
    <paragraph num="(4)">
      <text>A sports wagering licensee may use a multi-factor authentication process that uses a:</text>
      <paragraph num="(a)">
        <text>One-time password or code sent to a device or account that is confirmed to be owned by the owner of the bettor account;</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Software token generated from an authentication application;</text>
      </paragraph>
      <paragraph num="(c)">
        <text>Face ID or fingerprint verification application; or</text>
      </paragraph>
      <paragraph num="(d)">
        <text>Different method approved by the Commission.</text>
      </paragraph>
    </paragraph>
    <paragraph num="(5)">
      <text>The bettor must successfully complete a multi-factor authentication at account creation before the bettor may access their account and for each new device used to login to the account.</text>
    </paragraph>
    <paragraph num="(6)">
      <text>The bettor must repeat multi-factor authentication at least every 14 days for each device.</text>
    </paragraph>
  </paragraph>
  <paragraph num="G.">
    <text>A bettor may have only one bettor account for each sports wagering licensee.</text>
  </paragraph>
  <paragraph num="H.">
    <text>A bettor account may be funded using:</text>
    <paragraph num="(1)">
      <text>A debit card;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>A credit card subject to COMAR 36.10.13.28;</text>
    </paragraph>
    <paragraph num="(3)">
      <text>An electronic bank transfer, including a transfer through third parties;</text>
    </paragraph>
    <paragraph num="(4)">
      <text>An online or mobile payment system that supports online money transfers;</text>
    </paragraph>
    <paragraph num="(5)">
      <text>Winnings or payouts;</text>
    </paragraph>
    <paragraph num="(6)">
      <text>Bonuses and promotions;</text>
    </paragraph>
    <paragraph num="(7)">
      <text>Reloadable prepaid card, which has been verified as being issued to the bettor and is non-transferable; and</text>
    </paragraph>
    <paragraph num="(8)">
      <text>Any other means approved by the Commission.</text>
    </paragraph>
  </paragraph>
  <paragraph num="I.">
    <text>Funds may be withdrawn from a bettor account through:</text>
    <paragraph num="(1)">
      <text>Cash;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Wagers;</text>
    </paragraph>
    <paragraph num="(3)">
      <text>A cashiers check, wire transfer, or money order by the sports wagering licensee made payable to the bettor that is:</text>
      <paragraph num="(a)">
        <text>Issued directly to the bettor; or</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Delivered to the bettors address on file with the sports wagering licensee;</text>
      </paragraph>
    </paragraph>
    <paragraph num="(4)">
      <text>Credits to the bettors debit card;</text>
    </paragraph>
    <paragraph num="(5)">
      <text>Electronic bank transfers, including transfers through third parties;</text>
    </paragraph>
    <paragraph num="(6)">
      <text>Online or mobile payment systems that support online money transfers;</text>
    </paragraph>
    <paragraph num="(7)">
      <text>Reloadable prepaid card that:</text>
      <paragraph num="(a)">
        <text>Has been verified as being issued to the bettor; and</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Is non-transferable; or</text>
      </paragraph>
    </paragraph>
    <paragraph num="(8)">
      <text>Any other means approved by the Commission.</text>
    </paragraph>
  </paragraph>
  <paragraph num="J.">
    <text>Within 7 days of a bettor request for withdrawal of funds, the sports wagering licensee shall complete the withdrawal unless there is a pending:</text>
    <paragraph num="(1)">
      <text>Unresolved bettor dispute; or</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Investigation prompted by a bettor dispute or the Commission.</text>
    </paragraph>
  </paragraph>
  <paragraph num="K.">
    <text>Funds for withdrawal may be withheld from withdrawal until:</text>
    <paragraph num="(1)">
      <text>The funding transaction clears; or</text>
    </paragraph>
    <paragraph num="(2)">
      <text>The chargeback period ends.</text>
    </paragraph>
  </paragraph>
  <paragraph num="L.">
    <text>All adjustments to a bettor account for:</text>
    <paragraph num="(1)">
      <text>Individual amounts of $500 or less shall be periodically reviewed by the sports wagering licensee consistent with the sports wagering licensees internal control standards; and</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Individual amounts of more than $500 shall be authorized by the sports wagering licensees management before being entered.</text>
    </paragraph>
  </paragraph>
  <paragraph num="M.">
    <text>A sports wagering licensee may not allow the transfer of funds or credits from or to another bettor account.</text>
  </paragraph>
  <paragraph num="N.">
    <text>Except for the placement or settlement of a wager, unless the bettor has opted to not receive such notifications, the sports wagering licensee shall confirm each transaction on a bettor account by:</text>
    <paragraph num="(1)">
      <text>Email;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Text message; or</text>
    </paragraph>
    <paragraph num="(3)">
      <text>Other means:</text>
      <paragraph num="(a)">
        <text>Agreed upon by the bettor and sports wagering licensee; and</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Approved by the Commission.</text>
      </paragraph>
    </paragraph>
  </paragraph>
  <paragraph num="O.">
    <text>Account Statements.</text>
    <paragraph num="(1)">
      <text>A sports wagering licensee shall provide an account statement upon demand by the bettor.</text>
    </paragraph>
    <paragraph num="(2)">
      <text>An account statement shall include detailed account activity for at least 6 months preceding the 24-hour period before the request.</text>
    </paragraph>
    <paragraph num="(3)">
      <text>A sports wagering licensee shall be capable of providing a summary statement of all bettor activity during the previous 24 months if requested.</text>
    </paragraph>
  </paragraph>
  <paragraph num="P.">
    <text>If a sports wagering licensee knows or has reason to know that a bettors identification or bettor account has been compromised, a sports wagering licensee shall:</text>
    <paragraph num="(1)">
      <text>Suspend wagers from being made; and</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Immediately re-verify a bettors identification.</text>
    </paragraph>
  </paragraph>
  <paragraph num="Q.">
    <text>A sports wagering licensee shall:</text>
    <paragraph num="(1)">
      <text>Offer an easily accessible method for a bettor to close the bettors account; and</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Refund the balance remaining in a bettors account:</text>
      <paragraph num="(a)">
        <text>Pursuant to the sports wagering licensees internal control standards; and</text>
      </paragraph>
      <paragraph num="(b)">
        <text>No later than 7 days after receiving notice from the bettor of the intent to close the bettors account.</text>
      </paragraph>
    </paragraph>
  </paragraph>
  <paragraph num="R.">
    <text>A sports wagering platform shall employ a mechanism that can detect and prevent any bettor-initiated activity that would result in a negative balance of a bettor account.</text>
  </paragraph>
  <paragraph num="S.">
    <text>A sports wagering licensee shall:</text>
    <paragraph num="(1)">
      <text>Lock a bettors account after 3 failed log-in attempts; and</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Require multi-factor authentication to recover or reset a password or username after being locked.</text>
    </paragraph>
  </paragraph>
  <paragraph num="T.">
    <text>A sports wagering licensee shall suspend a bettor account if:</text>
    <paragraph num="(1)">
      <text>The bettor requests a suspension for a period not less than 24 hours as a self-limiting measure;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Required by the Commission;</text>
    </paragraph>
    <paragraph num="(3)">
      <text>The sports wagering licensee knows or has reason to know that the bettor may be a prohibited individual; or</text>
    </paragraph>
    <paragraph num="(4)">
      <text>The sports wagering licensee knows or has reason to know of:</text>
      <paragraph num="(a)">
        <text>Illegal activity related to the account;</text>
      </paragraph>
      <paragraph num="(b)">
        <text>A negative account balance; or</text>
      </paragraph>
      <paragraph num="(c)">
        <text>A violation of the sports wagering licensees terms and conditions has taken place on the bettors account.</text>
      </paragraph>
    </paragraph>
  </paragraph>
  <paragraph num="U.">
    <text>When a sports wagering account is suspended, the bettor shall be prevented from:</text>
    <paragraph num="(1)">
      <text>Wagering;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Depositing funds, unless the reason for the deposit is to clear a negative balance that resulted in the suspension;</text>
    </paragraph>
    <paragraph num="(3)">
      <text>Withdrawing funds if there is a pending unresolved bettor dispute or investigation prompted by a bettor dispute or the Commission;</text>
    </paragraph>
    <paragraph num="(4)">
      <text>Making changes to the bettor account; or</text>
    </paragraph>
    <paragraph num="(5)">
      <text>Removing the bettor account from the sports wagering platform.</text>
    </paragraph>
  </paragraph>
  <paragraph num="V.">
    <text>A bettor account suspended for a reason stated in §T of this regulation may be restored:</text>
    <paragraph num="(1)">
      <text>Upon expiration of the time period established by the bettor;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>When the sports wagering licensee has determined that the Commission has granted permission for the restoration;</text>
    </paragraph>
    <paragraph num="(3)">
      <text>When the licensee has determined that the bettor is not a prohibited or excluded individual; or</text>
    </paragraph>
    <paragraph num="(4)">
      <text>When the sports wagering licensee has determined that:</text>
      <paragraph num="(a)">
        <text>No illegal activity related to the account occurred;</text>
      </paragraph>
      <paragraph num="(b)">
        <text>There is no longer a negative account balance; or</text>
      </paragraph>
      <paragraph num="(c)">
        <text>No violation of the terms and conditions that has taken place on the bettors account.</text>
      </paragraph>
    </paragraph>
  </paragraph>
</regulation>