§ 3A-277. Standards for cashless transaction systems.

A.  The following standards shall be met in connection with any cashless transaction system:

1.  All player account information must be stored on at least two (2) separate nonvolatile media;

2.  An audit file must be kept of all financial transactions against the account.  This file must be stored in at least two (2) separate nonvolatile media, and be accessible for purposes of audit and disputes resolution to authorized individuals.  This file must be available on-line for a minimum of thirty (30) days, after which it must be available off-line for a minimum of one hundred eighty (180) days;

3.  Access controls must be in place to guarantee that unauthorized individuals will not have access to account information or history;

4.  Passwords or personal identification numbers (PINs), if used, must be protected from unauthorized access;

5.  All means for communicating information within the system shall conform to the standards set forth in this act;

6.  Player accounts shall follow accounting procedures which are designed to verify and protect the accurate recording of all player transactions;

7.  Any card or other tangible instrument issued to a player for the purpose of using the cashless transaction system shall bear on its face a control or inventory number unique to that instrument;

8.  Encoded bearer instruments printed or magnetic may include coupons and other items distributed or sold for game play, promotional, advertising or other purposes, but may not include cash.  Such instruments must be in electronically readable form in addition to having unique identification information printed on the instrument face.  The daily and monthly reporting must include with respect to such instruments:

a.cash converted to game play credits,

b.outstanding unredeemed balance,

c.game play credits converted to cash,

d.game play credits used, and

e.game play credits won;

9.  All customer accounts or instruments must have a redemption period of at least fourteen (14) days; and

10.  No ATM card, financial institution debit card or credit card shall be utilized as part of any cashless transaction system.

B.  Any “smart card” system which the licensee intends to implement as part of the cashless transaction system shall be tested by an independent testing laboratory approved by the Commission to ensure the integrity of player funds.  Any smart card must store on the card or on the system using the card an audit trail of the last ten (10) transactions involving the use of the card.  Each transaction record must include, at a minimum, the type of transaction, the amount of the transaction, the date of the transaction, the time of the transaction, and the identification of the player terminal or cashier terminal or other points of cash exchange where the transaction occurred.  The minimum daily and monthly reporting for smart card activity must include:

1.  Total of cash transferred to smart cards;

2.  Total of smart card amounts transferred to cash;

3.  Total of smart card amounts transferred to game play credits;

4.  Total of game play credits transferred to smart card amounts; and

5.  Total unredeemed smart card balance.

C.  Systems shall be permissible that allow player tracking, maintenance tracking, and other gaming management or marketing functions.  These systems shall not interfere with, or in any way affect, the outcome of any game being played.  Systems shall be permissible that allow progressive prize management with the certification of the independent testing laboratory approved by the Oklahoma Horse Racing Commission.

Added by Laws 2004, c. 316, § 18, State Question No. 712, Legislative Referendum No. 335, adopted at election held on Nov. 2, 2004.