1. A. A sports wagering licensee shall keep its geolocation system up to date by integrating current solutions in real time that can detect the use of:

   1. (1) Remote desktop software;
   2. (2) Rootkits;
   3. (3) Virtualization; and
   4. (4) Any other programs identified by the Commission as having the ability to circumvent geolocation measures.
2. B. The sports wagering licensee shall continually review the integrity of the geolocation system to ensure that the system detects and mitigates existing and emerging location fraud risks.

3. C. A sports wagering platform shall utilize a geolocation system to:

   1. (1) Reasonably detect the physical location of an individual attempting to access the sports wagering platform and place a sports wager; and
   2. (2) Monitor and block attempts to place an online sports wager when an individual is not within the State.

4. D. The geolocation system required by §C of this regulation shall:

   1. (1) Ensure that a bettor:

      1. (a) Is located within the State when placing a sports wager; and
      2. (b) Can dynamically monitor the bettors location; and
   2. (2) Block unauthorized attempts to place a sports wager when an individual is not within the State.

5. E. A sports wagering licensee shall:

   1. (1) Prior to commencing operations, and annually thereafter, ensure:

      1. (a) Its geolocation system is tested by a Commission approved testing laboratory; and
      2. (b) A report on the annual testing is submitted to the Commission no later than 120 days after the end of the licensee’s fiscal year;

   2. (2) Ensure that testing of the geolocation system includes:

      1. (a) Attempts to place wagers at locations from outside of the State from multiple locations within varying distances from the State border;
      2. (b) Attempts to place wagers at locations within the State from multiple locations within varying distances from the State border; and
      3. (c) Attempts to place wagers in which the tester crosses the State border;
   3. (3) For all geolocation testing, ensure that the frequency of geolocation check is documented and tested;
   4. (4) Ensure that testing confirms that a geolocation check occurs immediately upon a change of IP address;
   5. (5) Ensure that testing includes static and mobile connections; and
   6. (6) Ensure that testing is completed on all device types using the most prevalent versions available.
6. F. A sports wagering licensee shall grant the Commission read only access to its geolocation system as required by the Commission.
7. G. In addition to the requirements in this regulation, the Commission may require a sports wagering licensee to implement other geolocation features.

Authority: State Government Article, §§9-1E-01—9-1E-15, Annotated Code of Maryland

Effective date:

Regulations .01—.06 adopted as an emergency provision effective August 5, 2021 (48:18 Md. R. 690); adopted permanently effective January 13, 2022 (49:1 Md. R. 16)

Regulation .04E amended effective April 27, 2026 (53:8 Md. R. 356)

Regulation .04E, F, G adopted effective July 7, 2025 (52:13 Md. R. 657)

Regulation .05N amended as an emergency provision effective January 26, 2022 (49:5 Md. R. 364); amended permanently effective July 25, 2022 (49:15 Md. R. 740)

Regulation .05F amended effective July 7, 2025 (52:13 Md, R. 657)

Regulation .06 amended as an emergency provision effective January 26, 2022 (49:5 Md. R. 364); amended permanently effective July 25, 2022 (49:15 Md. R. 740)

Regulation .06B amended effective April 27, 2026 (53:8 Md. R. 356)