2214.1 GOS Distributors and Retailers shall file with the Office internal controls for all aspects of GOS operations prior to commencing operations.

2214.2 As determined by the Office, prior to commencing GOS, Distributors and Retailers Licensees shall submit to the Office for approval internal controls for all aspects of GOS (i.e., retail operations, back office, and the Centralized Accounting System ("CAS"), prior to implementation and any time a change is made thereafter.

2214.3 The internal controls shall address the following items regarding the GOS, at a minimum:

(a) User access controls for all personnel having access to GOS Machine internal components requiring key access, access to the CAS components, payouts, and/or related transactions associated with GOS Machines;

(b) Segregation of duties;

(c) Automated and manual risk management procedures;

(d) Procedures for identifying and reporting fraud and suspicious conduct;

(e) Procedures for identifying and preventing persons who are under eighteen (18) years of age from engaging in a GOS; and

(f) Procedures for identifying and preventing intoxicated and impaired persons from engaging in a GOS.

2214.4 GOS Manufactures Licensees shall develop system requirements and specifications for internal controls according to industry standards and implement the requirements and specifications as required by the Office.

SOURCE: Final Rulemaking published at 66 DCR 11598 (August 30, 2019); as amended by Final Rulemaking published at 68 DCR 3289 (March 26, 2021).