(1) The Sports Wagering Operator shall have security measures and controls to prevent EFT fraud where financial transactions are conducted through EFT. A failed EFT attempt is not considered fraudulent if the patron has successfully performed an EFT on a previous occasion and has no outstanding chargebacks. Otherwise, the Sports Wagering Operator shall:

1. (a) Temporarily block the patron's Sports Wagering Account for investigation of fraud after five consecutive failed EFT attempts within a ten-minute period. If there is no evidence of fraud, the block may be vacated; and
2. (b) Suspend the patron's Sports Wagering Account after five additional consecutive failed EFT attempts within any subsequent ten-minute period.