Ask Reggi Your Question Now
Can you summarize 038-0002-5 WYAR?
Online Sports Wagering > Technical Standards
Short Summary
This document, part of the Wyoming Administrative Rules, governs the technical standards for the operation of online sports wagering. It applies to sports wagering operators, sports wagering vendors, and individuals or patrons attempting to access the sports wagering system. The document requires sports wagering operators to use a sports wagering system to offer online sports wagering in compliance with applicable laws and these rules. Only sports wagering operators or their sports wagering vendors are allowed to process, accept, offer, or solicit online sports wagers. If a sports wagering operator develops its own system instead of utilizing a vendor, it is considered both a sports wagering operator and a sports wagering vendor. The document mandates compliance with the Gaming Laboratories International Standard Series, GLI-33: Standards for Event Wagering Systems, Version 1.1, and its appendices. The specified technical specifications must be met by the sports wagering system used for online sports wagering. Failure to comply may result in disciplinary action by the Commission. The document also governs the approval and certification process for sports wagering systems used in online sports wagering operations in Wyoming. It requires sports wagering operators and sports wagering vendors to submit their sports wagering systems to a nationally recognized, independent gaming laboratory approved by the Wyoming Gaming Commission for certification testing. Certification and Commission approval must be obtained before using any sports wagering system for online sports wagering. The sports wagering system must meet or exceed the specifications set forth in the rules or other technical specifications prescribed by the Commission. Sports wagering operators and vendors are prohibited from offering online sports wagering in Wyoming without certification. The document also mandates the submission of change control processes for approval, which outline evaluation procedures for updates and require certification by the independent gaming laboratory. Additionally, it stipulates that each product operating under the certified change control processes must be fully certified annually and accompanied by formal certification documentation. The sports wagering operator and vendor may seek approval for extension beyond the annual approval in cases of hardship, subject to the Commission’s discretion. The document sets forth the geolocation requirements for online sports wagering in Wyoming. It applies to online sports wagering vendors and individuals or patrons attempting to access the sports wagering system. All online sports wagering transactions must be initiated and received by a patron located within the authorized geographic boundaries of Wyoming, excluding Indian Lands. The document clarifies that the intermediate routing of electronic data does not determine the location of the online sports wager. Online sports wagering vendors are required to utilize a geolocation system to detect the physical location of individuals or patrons accessing the system and to block unauthorized attempts to place online sports wagers outside the authorized geographic boundaries. The Commission has the authority to approve technical specifications for geolocation systems and may issue additional requirements through Commission Directives. The document also requires sports wagering operators and sports wagering vendors to place their primary server or other equipment responsible for the acceptance of patron wagers in secure locations in Wyoming, unless otherwise approved by the Commission in writing. The Commission may approve the use of internet or cloud-based hosting of duplicate data or data not related to transactional wagering data upon written request of a sports wagering operator or sports wagering vendor. The document governs the integrity and security assessment of the sports wagering system. It applies to sports wagering operators and sports wagering vendors in Wyoming. These operators and vendors are required to conduct an integrity and security assessment of their sports wagering system within 90 days of commencing operations and annually thereafter. The assessment must be conducted by an independent professional selected by the operator or vendor and approved by the Wyoming Gaming Commission. The scope of the assessment includes vulnerability assessment, penetration testing, review of firewall rules, technical security control assessment, evaluation of information security services, and any other criteria prescribed by the Commission. The independent professional’s report on the assessment must be submitted to the Commission within 30 days and should include the scope of review, details of the individuals who conducted the assessment, date of assessment, findings, recommended corrective action (if applicable), and the operator’s or vendor’s response to the findings. The document allows leveraging the results of prior assessments conducted by the same independent professional against certain standards, but fresh assessments are required for critical components unique to the state. In addition to the technical security controls set out in Appendix B of GLI-33, additional technical security controls may be adopted by the Commission through the issuance of Commission Directives. Each sports wagering operator or sports wagering vendor is required to implement, maintain, regularly review and revise, and comply with a comprehensive Information Security Management System (ISMS). The purpose of the ISMS is to take reasonable steps to protect the confidentiality, integrity, and availability of personal identifying information (PII) of individuals who place a wager with the sports wagering operator or sports wagering vendor. The ISMS should contain administrative, technical, and physical safeguards appropriate to the size, complexity, nature, and scope of the operations and the sensitivity of the personal information owned, licensed, maintained, handled, or otherwise in the possession of the sports wagering operator or sports wagering vendor. Additional ISMS specifications may be adopted by the Commission through the issuance of Commission Directives. The document also allows sports wagering operators and sports wagering vendors to establish test accounts for the purpose of testing the components and operation of a sports wagering system. The internal controls adopted by the operator or vendor must address procedures for issuing funds used for testing, assigning test accounts to individual users, maintaining records of test accounts, auditing testing activity, and authorizing and auditing out-of-state test activity. No specific penalties or exemptions are mentioned in these documents.
Whom does it apply to?
Sports wagering operators, sports wagering vendors, and individuals or patrons attempting to access the sports wagering system
What does it govern?
Technical standards for the operation of online sports wagering
What are exemptions?
No exemptions are mentioned.
What are the Penalties?
Disciplinary action by the Commission for failure to comply
Jurisdiction
Wyoming