Chapter 3775-9 | Sports Gaming Equipment and Systems

Rule 3775-9-01 | Sports gaming equipment approval and testing.

• Effective: August 15, 2022
• Promulgated Under: 119.03

(A) Sports gaming proprietors, mobile management service providers, and management service providers are not permitted to operate any sports gaming equipment unless such equipment is approved by the executive director and included in the commission's database. All sports gaming equipment must be evaluated by a certified independent testing laboratory prior to approval and inclusion in the commission's database, unless otherwise approved by the executive director.

(B) When sports gaming equipment is required to be tested by a certified independent testing laboratory, the sports gaming proprietor or sports gaming supplier applicant or licensee making the submission must adhere to the following:

(1) Submit a written request to a certified independent testing laboratory that, at a minimum, specifically references the scientific testing and technical evaluation necessary to determine compliance with Chapter 3775. of the Revised Code and the rules adopted thereunder, as well as the applicable standards in the appendix to this rule, and identifies the sports gaming equipment at issue;

(2) Submit all necessary items and information to the certified independent testing laboratory;

(3) Pay all costs associated with the scientific testing and technical evaluation performed by the certified independent testing laboratory;

(4) Engage no more than one certified independent testing laboratory to perform scientific testing and technical evaluation of any particular version of sports gaming equipment software, hardware, or other technology without prior written authorization from the executive director; and

(5) Submit any items or information pertaining to the sports gaming equipment to the commission, if requested.

(C) The executive director may require previously approved sports gaming equipment to be evaluated or re-evaluated by a certified independent testing laboratory if it is determined that the equipment fails to meet any of the requirements of Chapter 3775. of the Revised Code or the rules adopted thereunder or jeopardizes the integrity of sports gaming in any way.

(D) Sports gaming equipment tested by a certified independent testing laboratory will not be included in the commission's database unless the executive director approves the test results.

(E) Sports gaming equipment software components deemed to be critical must be capable of verification utilizing a verification method approved by the executive director.

Last updated August 15, 2022 at 8:41 AM

Supplemental Information

Authorized By: 3775.02
Amplifies: 3775.01, 3775.02
Five Year Review Date: 8/15/2027

Rule 3775-9-02 | Sports gaming systems.

• Effective: August 15, 2022
• Promulgated Under: 119.03

(A) A sports gaming system must monitor and record all data related to sports gaming in real-time, including any changes made to the data or system. The sports gaming system must provide accurate reporting using a method and format approved by the executive director.

(B) A sports gaming system must be capable of automatically preparing a report summarizing the results of all sports gaming transactions conducted in this state. The report must be tested by a certified independent testing laboratory to confirm that it accurately calculates and displays the results of sports gaming. The format and the required periods of this report are determined by the executive director.

(C) The sports gaming system servers, or other equipment, responsible for accepting wagers must be located within the state of Ohio. This rule does not prohibit sports gaming data from being stored or accessed elsewhere, including cloud-based environments.

(D) The sports gaming system servers or other equipment required to be located in Ohio, under paragraph (C) of this rule, must be managed by an entity holding a sports gaming proprietor or sports gaming supplier license. The data center where the sports gaming system server is housed must be secure and have access controls in place to prevent unauthorized access to the sports gaming system servers or other equipment.

(E) Sports gaming systems must utilize disk redundancy and sports gaming data must be backed up to prevent the loss of data and minimize down time.

(F) All communication with a sports gaming system must be secured utilizing an encryption methodology that ensures data integrity and prevents data theft.

(G) The sports gaming system must perform an authentication check on any sports gaming equipment which connects to it. The sports gaming system must not accept any wagers or player account requests from sports gaming equipment that fails the authentication check. The authentication check must:

(1) Occur at least once every twenty-four hours;

(2) Determine with a high degree of accuracy if the sports gaming equipment has been altered in a way that may threaten the integrity of the sports gaming system or data; and

(3) Be logged, including, but not limited to:

(a) Date and time;

(b) Device identifier;

(c) Device type;

(d) Location; and

(e) Disposition of the authentication check.

Last updated August 15, 2022 at 8:41 AM

Supplemental Information

Authorized By: 3775.02
Amplifies: 3775.01, 3775.02
Five Year Review Date: 8/15/2027

Rule 3775-9-03 | Location-based technology providers.

• Effective: August 15, 2022
• Promulgated Under: 119.03

(A) A location-based technology provider must be licensed by the commission as a sports gaming supplier.

(B) All attempts to place wagers with type A sports gaming proprietor licensees, from both authorized and unauthorized locations, must be recorded by the location-based technology provider. The data must be available to the commission in a format approved by the executive director.

(C) The location-based technology provider must provide the commission access to real-time geofence data, including any equipment necessary to view the real-time geofence data. The method, format, and equipment to access the real-time geofence data must be approved by the executive director.

(D) The location-based technology provider and its geofence system must meet the following requirements:

(1) The system must comply with the applicable electronic sports gaming equipment standards required by this chapter;

(2) The system must determine the location of a patron within a margin of error determined by the executive director;

(3) The system must provide reporting and analytics to allow for effective monitoring of patron location;

(4) The provider must ensure the integrity of the data used to make location determinations;

(5) The provider must conduct maintenance and updates to the system to ensure proper functionality; and

(6) Any other item required by the executive director.

Last updated August 15, 2022 at 8:41 AM

Supplemental Information

Authorized By: 3775.02, 3775.11
Amplifies: 3775.01, 3775.02, 3775.08, 3775.11
Five Year Review Date: 8/15/2027