Authority: IC 4-33-4; IC 4-35-4

Affected: IC 4-33; IC 4-35

Sec. 1. (a) An LMGS shall utilize sufficient security to ensure patron access is appropriately limited to the account holder. Security measures shall include the following:

1. (1) Personal identification number.
2. (2) Password or other access security feature.
3. (3) Two (2) or more challenge questions.
4. (4) Password expiration every quarter.

(b) The LMGS shall utilize a secure method of data transfer approved by the executive director or the executive director's designee for communications that contain the following:

1. (1) Patron account numbers.
2. (2) User identification.
3. (3) Passwords.
4. (4) Personal identification numbers.

(Indiana Gaming Commission; 68 IAC 25-12-1; filed Jan 7, 2016, 8:21 a.m.: 20160203-IR-068150084FRA; readopted filed Oct 17, 2022, 11:45 a.m.: 20221116-IR-068220276RFA)