d) Any licensee, applicant, or key person who knowingly discloses, authorizes disclosure, permits a disclosure, or otherwise assists in the disclosure of the identity of a person on the Self-Exclusion List shall be subject to discipline for each disclosure, including but not limited to any disclosure by any of its officers, directors, employees, attorneys, agents and contractors, unless the disclosure complies with the following provisions:

1. 1) The disclosure is made on the same need to know basis restriction applicable to mental health information to staff for the sole purpose of effectuating the approved internal control responsibilities.
2. 2) The disclosure is made for the sole purpose of effectuating the Self-Exclusion program and this Part as to any customer tracking system, customer identification system, sports wagering system, internet wagering system, or any other financial transactions system.
3. 3) The disclosure is made in compliance with the approved internal controls.