1. A. A facility operator shall submit to the Commission for review and written approval its security operating procedures.

2. B. A facility operator’s security operating procedures shall, at a minimum, include:

   1. (1) A security zone plan for the facility designed to ensure:

      1. (a) The physical safety of employees and invitees to the facility;
      2. (b) The safeguarding of assets;
      3. (c) Compliance with all applicable laws and regulations including Commission approved internal controls and operating procedures;
      4. (d) That intoxicated individuals are identified, prohibited from entering the facility and, if necessary, immediately removed from the facility; and
      5. (e) That an individual under the age of 18 years is identified, prohibited from playing instant bingo and, if necessary immediately removed from the facility; and

   2. (2) Procedures and controls addressing:

      1. (a) Facility access controls including:

         1. (i) An access badge or key system;
         2. (ii) If utilized, specifications pertaining to a computerized access control system; and
         3. (iii) Administrative responsibility over a manual or computerized access control system;
      2. (b) A temporary access credential;
      3. (c) Key controls;
      4. (d) Emergency alarm and fire command responsibilities;
      5. (e) Evacuation of the facility in the event of fire or other emergency;
      6. (f) The identification and immediate removal of an intoxicated individual, and, if applicable, an individual under the age of 18 years; and
      7. (g) The notice requirements of §(B)(4) of this regulation;

   3. (3) A security incident log:

      1. (a) Maintained in:

         1. (i) A book with bound numbered pages that cannot be readily removed; or
         2. (ii) An electronic format equipped with software that prevents modification of an entry after it has been initially entered into the system; and

      2. (b) Documenting:

         1. (i) The assignment number of the incident;
         2. (ii) The date and time of the incident;
         3. (iii) The name of the person covering the incident;
         4. (iv) The nature of the incident; and
         5. (v) The resolution of the incident; and

   4. (4) A requirement that a facility operator notify the Commission upon detection of:

      1. (a) An individual engaged in, attempting to engage in, or suspected of cheating, theft, embezzlement, or other illegal activities; and

      2. (b) An individual who is:

         1. (i) Under the age of 18 years and has played instant bingo; or
         2. (ii) Intoxicated.

Authority: Criminal Law Article, §§ 12-301. 1 and 12-308; State Government Article, §9-110; Annotated Code of Maryland

Effective date:

Regulations .01— .19 adopted as an emergency provision effective August 26, 2013 (40:20 Md. R. 1650); adopted permanently effective December 12, 2013 (40:24 Md. R. 2019)

Regulation .06A amended effective October 22, 2018 (45:21 Md. R. 976)

Regulation .14B amended effective May 25, 2026 (53:10 Md. R. 459)