Authority: IC 4-32.3-3-3

Affected: IC 4-32.3

Sec. 11. (a) An electronic pull tab system must provide password protection for each qualified organization conducting electronic pull tab games using the system.

(b) An electronic pull tab system must provide password security or other secure means of ensuring data integrity and enforcing user permissions for all system components, including the following:

(1) The programs and data files may only be accessible through entering a password known only to authorized personnel.

(2) The electronic pull tab system must have multiple security access levels to control and restrict different privilege levels.

(3) The electronic pull tab system access accounts must be unique when assigned to the authorized personnel.

(4) The storage of passwords and PINs must be in an encrypted, nonreversible form.

(5) A program or report must be available that lists the authorized users on the electronic pull tab system, including their privilege level.

(c) The components of an electronic pull tab system that allow access to users, other than end users for game play, must have a password sign in comprised of a:

(1) personal identification number; or

(2) personal identification code and personal password.

(d) The personal identification number or personal identification code and personal password described in subsection (c) may not be shared between employees or volunteers of a qualified organization. Each individual accessing the system shall have their own unique personal identification number or personal identification code and personal password that allows the commission to determine which individual has accessed the system.

(Indiana Gaming Commission; 68 IAC 21-10.5-11; filed Dec 23, 2025, 10:26 a.m.: 20260114-IR-068250645IFA)