(a) Definitions. As used in this section:

1. (1) “Commission” means the Arkansas Racing Commission or the commission’s designee;

2. (2)

   1. (A) “Licensee” means a person or entity licensed to conduct a casino gaming operation.
   2. (B) The term does not include a person or entity licensed as a holder of a security or other ownership interest in the operation, or as an officer, director, or key employee of the operation, or due to any other relationship or involvement with the operation;
3. (3) “Operator” means any licensee that operates a system-supported or system-based gaming device on the premises where its gaming operation is located; and
4. (4) “System” means a system-supported or system-based gaming device.

(b) In addition to any other requirements set forth in The Arkansas Casino Gaming Amendment of 2018, Arkansas Constitution, Amendment 100, or this part, all operators of a system shall comply with the following requirements:

1. (1)

   1. (A) Prior to commencing operations of its system, an operator shall provide the Arkansas Racing Commission with a list of all persons who may access the main computer or data communications components of its system.
   2. (B) The list shall describe the role or roles assigned to each person on the list.
   3. (C) Any changes to the list in a particular month shall be provided to the commission on or before the fifteenth day of the following month;
2. (2) At the request of the commission, an operator shall provide and maintain, at its sole expense and at such location as the commission may designate, networked equipment for the purpose of monitoring information regarding the system including, but not limited to, the names of persons accessing the main computer or data communications components of the system, the identification of functions being performed by such persons, gaming application authentication information, and any other information required to be logged by the system in accordance with this part; and
3. (3) An operator shall retain and provide commission agents, upon request, all records pertaining to its system, including, without limitation, computer room visitor logs and system transaction logs.