Minnesota Legislature
Office of the Revisor of Statutes
Minnesota Administrative Rules
7863.0270 ELECTRONIC LINKED BINGO GAME SYSTEM STANDARDS AND REQUIREMENTS.
Subpart 1.
Scope.
In addition to the provisions of parts 7861.0270 and 7863.0260, subparts 1 and 1a, and Minnesota Statutes, sections 349.12, subdivisions 12a, 25a, and 25c; 349.17, subdivisions 6, 8, and 9; and 349.211, subdivision 1a, an electronic linked bingo game system must meet the requirements contained in this part.
Subp. 2.
Activating play.
Coded entry to activate play may include manual entry or the use of a magnetic strip card or bar-coded receipt provided at the point of sale.
Subp. 3a.
No simultaneous play.
An electronic game device may be used to play an electronic linked bingo game or an electronic pull-tab game. The electronic game device must not allow for the purchase of an electronic pull-tab from any screen of an electronic linked bingo game.
Subp. 4.
Electronic monitoring by board.
Electronic monitoring of the operation of the electronic linked bingo device by the board will be limited to read-only access of transaction logs and status of devices. The board is not allowed to alter any data or game play.
Subp. 5.
Secured data transmission.
An electronic linked bingo game system must provide secured data transmission to all participating locations. Separate computing communications methods are required for each linked bingo game provider and each manufacturer. All data for each linked bingo game provider and manufacturer must be secure, separate from, and inaccessible to other linked bingo game providers and manufacturers.
Subp. 6.
Changes in software or hardware.
If there is any change in software or hardware by a linked bingo game provider, the linked bingo game provider must assign a new version or code build number and must submit the new software version or code build number to the director for review, and, if required by the director, the game or equipment must be submitted for review and approval by the board. The new version or code build number must be approved by a certified independent testing laboratory.
Subp. 6a.
Same version or updates.
An electronic linked bingo provider's devices must operate on the same version of all installed software.
Subp. 7.
Changes in version of system or game.
A.
If there is a change in the version or code build number of a system or game, the linked bingo game provider must assign a new version or code build number for any changes or upgrades to the electronic linked bingo system or game to indicate a change of the version or code build number of the system or game.
B.
Any changes to the electronic linked bingo game or system must be approved by the director before the game or system is placed into operation.
C.
Any changes in a version or code build number that have an effect on the outcome of a previously approved game must be retested by a certified independent testing laboratory.
Subp. 7a.
Daily system close for update.
All electronic linked bingo game systems must automatically close and update all site activity from the previous day to the central server by 2:30 a.m. central standard time.
Subp. 8.
Application software.
All application software must be owned by the linked bingo game provider. Software developed by the linked bingo game provider must also meet the requirements of this subpart.
A.
For purposes of this subpart, application software is developed by the linked bingo game provider if the linked bingo game provider designs the central system, database, user interface, the program architecture, and programs the source code.
B.
Application software must be designed to accommodate assistive technology. Assistive technology is any item, piece of equipment, software program, or product system that is used to increase, maintain, or improve the functional capabilities of persons with disabilities.
C.
A licensed linked bingo game provider may jointly develop application software for an electronic linked bingo system and an electronic pull-tab system with a licensed electronic pull-tab manufacturer if the jointly developed application software permits the operation of electronic linked bingo games and electronic pull-tab games on the same electronic linked bingo device or electronic pull-tab device.
D.
Any application software to be used by the linked bingo game provider must be wholly owned free and clear and without any obligation or condition by any entity other than the licensed linked bingo game provider.
E.
The linked bingo game provider must provide the board with documentation establishing ownership of the intellectual property rights to the entire game application software and system.
Subp. 9.
Secure communication.
Connections between all components and access points of the electronic linked bingo game system must only be through the use of secure communication protocols that are designed to prevent unauthorized access or tampering, employing:
A.
Advanced Encryption Standard (AES) specifications as defined by the National Institute of Standards and Technology (NIST); and
B.
IEEE 802.11 standards contained in the Wi-Fi Protected Access II (WPA2) authentication protocols.
Subp. 10.
Independent verification check.
The electronic linked bingo game system and all devices that communicate with the electronic linked bingo game system must have the ability to allow for an independent verification check of the system's software from an authorized source approved by the board. The independent verification check ability is required for all application software that the board determines may affect the integrity of the game. The verification check must provide a means for on-site and off-site field verification of the software and applicable devices to identify and validate the program. All Minnesota board-approved games must be identical to the games presented to a certified independent testing laboratory, including user-acceptance testing and quality assurance required under subpart 36.
Subp. 11.
Electronic accounting data.
Electronic accounting data must be at least ten digits in length and must be maintained in dollars and cents.
Subp. 12.
Cash and inventory verification.
The system must record the value of bingo faces purchased and played, and prizes won.
Subp. 13.
Restricted use.
A.
Individual components of an electronic linked bingo game system must not be capable of being used as stand-alone units for the purposes of engaging in any function or use not permitted by these standards at any time.
C.
No component of an electronic linked bingo system may retain any personal player information after the player has returned the device to the game operator, other than winner information required on a winner verification form.
Subp. 14.
Memory backup.
Central servers must have nonvolatile backup memory or its equivalent that must be maintained in a secure compartment on the central server for the purpose of storing and preserving a redundant set of critical data that include:
A.
error corrections that may have occurred on electronic linked bingo devices or central server, such as an invalid PIN or a game interrupt;
C.
recall of all wagers and other play information, such as electronic linked bingo face number, serial number, and permutation number of game, associated with all games in play and prior to closeout of daily activity;
D.
electronic accounting data capturing the record of transactions for electronic linked bingo devices in use for the central server including:
E.
comprehensive checks of critical memory for each device in operation following game initiation including each specific bingo face in play, bingo numbers selected, and winner verification. An unrecoverable corruption of critical memory must result in an error notification and cause all electronic linked bingo devices in play to cease further function. An unrecoverable critical memory error report must be immediately generated to the board and must include the name of the authorized person who performs any recapture or memory clear of the central server; and
F.
the ability to immediately, accurately, and securely cash out all players who have funds in the system in the event of power or communications network loss or other time of game or play interruption.
Subp. 15.
Randomization.
An electronic linked bingo game system must use randomizing procedures in the creation of games for electronic linked bingo faces that have been created using a method previously approved by the board. As used in this subpart, unless the context requires a different meaning, "face position" means the first bingo face dealt, second bingo face dealt, in sequential order, and "number position" means the first number drawn in sequential order. Any random number generation, shuffling, or randomization of outcomes used in connection with an electronic linked bingo system must be by use of a random number generation application that has successfully passed standard tests for randomness and unpredictability as defined in part 7861.0210, subpart 44.
Subp. 16.
Game information on system.
Prior to the commencement of an electronic linked bingo game, the following data must be maintained and be viewable electronically on the electronic linked bingo game system:
B.
a description of the game sufficient to categorize the game or session relative to other games or sessions;
C.
the jackpot prize for the game or session based on the number of electronic linked bingo faces in play for each game and the cost for each face; and
Subp. 17.
Game information on device.
The following data must be maintained and be viewable electronically on the electronic linked bingo device:
Subp. 18.
Electronic linked bingo face generation.
Upon purchase initiation request from an electronic linked bingo device, the electronic linked bingo system must dispense an electronic facsimile of a bingo face. Once dispensed, such face or outcome must not be reused until the bingo permutation is exhausted.
Subp. 18a.
Animated win determination.
Electronic linked bingo games may contain animated win determinations, but displays may not simulate spinning reels or nonstraight win line graphic representations.
Subp. 19.
Game auditing.
B.
If an audit or other game determination is conducted while a game is in play, termination of the entire game must immediately occur.
C.
Access to the reporting portal must be secure and limited only to the gambling manager, the authorized organization members who are not sellers, the organization's accountant, and the licensed distributor that leased the electronic game system to the organization. Access to the portal requires a unique identifying code and password for each individual user. Sellers may not have reporting portal access.
Subp. 21.
System security and access.
A.
The electronic linked bingo game system must be located in Minnesota in a secure location with limited, authorized access.
B.
Any system elements that hold game data, other than the electronic linked bingo devices, must be in a locked area or in a locked case or compartment with access limited to designated personnel.
C.
The linked bingo game provider must register employees having authorized system access with the board.
D.
The system must be in a secure location and provide electronic security for the games against alteration, tampering, or unauthorized access.
E.
The system must allow the board and other authorized state representatives real-time access to data and equipment, including all accounting for sales, prizes, and credits per device, per site.
Subp. 22.
Data alteration.
The electronic linked bingo system must not permit the alteration of any accounting or significant event log information that was communicated from the electronic linked bingo device without board-approved access controls. In the event financial data is changed, the electronic linked bingo system must be able to produce an automated audit log documenting the:
Subp. 23.
Backup and recovery.
A.
An electronic linked bingo system must have a separate physical medium for securely storing required data on the computer, which must be backed up in real time by a backup medium.
B.
All data required to be available or reported by this subpart must be retained for a period of not less than 3-1/2 years.
C.
All storage of critical data must use error checking and be stored on a nonvolatile physical medium.
D.
The database must be stored on redundant media so that no single failure of any portion of the system would result in the loss or corruption of data.
E.
In the event of a catastrophic failure when the electronic linked bingo system cannot be restarted in any other way, it must be possible to reload the electronic linked bingo system from the last viable backup point and fully recover the contents of that backup, to consist of at least the following information:
(3)
auditing information, including all open game schedules and the summary of completed games; and
Subp. 24.
System access; password requirements.
A.
The linked bingo game provider must maintain password access for the linked bingo game provider; the distributor must maintain password access for the distributor; and the organization must maintain password access for the gambling manager and sellers.
B.
The linked bingo game provider, the distributor, and the organization must register employees and volunteers with authorized system access with the board.
C.
The operating system software and application software must have multiple security access levels to control and restrict different classes of access. The accounts for the access levels must be unique when assigned to the authorized personnel and only one user per account is allowed.
D.
The operating system software and application software must provide comprehensive password security or other secure means of ensuring data integrity and enforcing user permission. It is required that:
(1)
all programs and data files must only be accessible via the entry of passwords that will be known only to the linked bingo game provider and the gambling manager;
(3)
a program must be available that will list all registered users on the system including their privilege level;
Subp. 25.
System log-in and log-out requirements.
Access to an electronic game system requires a password log-in with two-factor authentication (2FA) comprised of a personal identification code and a personal password. System log-in and log-out requirements apply to linked bingo game providers, distributors, gambling managers, assistant gambling managers, users authorized by the gambling manager, and sellers.
Subp. 26.
Electronic accounting and reporting; record of daily system transactions.
A.
One or more electronic accounting systems must perform reporting and other functions in support of the electronic linked bingo system. A linked bingo game provider may enhance its accounting system, with director approval, for innovation in lawful gambling reporting. The electronic accounting system must not interfere with the outcome of any gaming function.
B.
A database containing a permanent record of daily transactions played on the electronic linked bingo game system must be maintained by the electronic linked bingo game system on the central server. The database and central server must be accessible to the board at all times.
Subp. 26a.
Point-of-sale system requirements.
A.
The point-of-sale system used for the conduct of electronic games must require entry of the seller's unique identifying code to open the point-of-sale system.
B.
The point-of-sale system must record the unique identifying code of any person making any transaction at any time. The user list naming each seller with the seller's unique identifying code must be available on the linked bingo game provider's portal.
C.
The point-of-sale system must be capable of immediately producing an electronic game occasion report, using the prescribed terminology, that includes the following information:
Subp. 27.
Reporting requirements of electronic accounting system.
The electronic linked bingo game system must provide the following reports to the Gambling Control Board and the Department of Revenue.
A.
An electronic linked bingo game report must be available on demand for each game currently in play and prior to winner verification. The report must contain the following information:
B.
An electronic linked bingo game report must be available on demand for each completed game. The report must contain the following information:
C.
Other electronic linked bingo game reports that must be available on demand are:
(2)
sales reports, which must provide:
(a)
daily activity by site, by organization, and by linked bingo game provider for all active sites;
(l)
the cumulative net value of credits available for deposit at the close of each electronic game occasion;
(4)
inventory reports must:
(a)
provide for current site inventory showing beginning of the day inventory, additions, faces sold, and ending inventory;
(b)
contain month-end reports for each site showing faces received, put into play, and removed from play; and
(c)
provide for game tracking, from game creation to distribution, to game play, and to game close. Detail must include game number, participating sites, and date played and must be searchable by the board by any of the required data fields;
(6)
real-time site activity report with the ability to:
(a)
view game play activity in real time at each site without disruption or knowledge of the seller;
(c)
view each transaction with date and time stamp, including seller log-in and log-off, device load, game play, device credits redeemed, and any malfunction or misplay;
(7)
system user list, including:
(a)
full name of sellers, assistant gambling managers, gambling manager, board investigators, linked bingo game provider personnel, and distributor personnel, and their unique identifying codes;
(b)
position (seller, assistant gambling manager, gambling manager, distributor, linked bingo game provider, or board investigator);
D.
By the tenth day of each month, the linked bingo game provider must provide an invoice to the organization that includes the following information, using the prescribed terminology, for the previous month's electronic linked bingo activity at each premises:
(6)
the prize amount payable or receivable, which is the difference between the electronic linked bingo prizes paid and the electronic linked bingo prizes awarded at premises;
(7)
the linked bingo game provider's fee, which must be listed both as a percentage of electronic linked bingo net receipts and as an amount to be paid by the organization; and
(8)
the line numbers where these amounts are to be reported on the organization's monthly reports to the board.
E.
Other statistical and activity reports as required by the board and maintained by the linked bingo game provider must be provided in a format prescribed by the board upon request.
F.
Historical data from all sites, both active and inactive, must be available to the board as follows:
(1)
the most recent data must be available on the linked bingo game provider's portal for at least 3-1/2 years;
(2)
archived data or data older than 3-1/2 years must be transferred to the board in a format prescribed by the board; and
(3)
all electronic linked bingo game information, including game sales and report data, must be searchable by the board and recorded in a manner that allows it to be electronically transmitted upon demand by the board and at the expense of the linked bingo game provider.
Subp. 28.
Electronic game system.
A.
Each component of an electronic game system must function as indicated by the communication protocol implemented by the licensed linked bingo game provider of the electronic linked bingo game system.
B.
All communication between the central server and the electronic linked bingo devices must use authentication and encryption protection employing Advanced Encryption Standard (AES) specifications as defined by the National Institute of Standards and Technology (NIST) and the IEEE 802.11 standards contained in the Wi-Fi Protected Access II (WPA2) authentication protocols to provide secure authentication of the device and the central server, ensure the integrity of the data communicated, and for confidentiality.
C.
The communicated data must be encrypted. All systems must require virtual private network (VPN) or secure sockets layer (SSL) encrypted tunneling protocols unless otherwise approved by the board. The certified testing laboratory must examine each submitted electronic game system to ensure that the proposed field configuration will be secure. The certified testing laboratory may provide additional security recommendations to maintain the integrity of the configuration.
D.
The electronic game system must be capable of being tested by the board to verify approved product.
Subp. 29.
Electronic game system security.
A.
The electronic game system security must be designed or programmed in such a way that it may only communicate with authorized electronic devices using a nonbroadcasting encrypted system.
B.
The electronic game system security must include the ability to automatically disable an electronic linked bingo device if the device goes beyond a physical property restriction at a sales location. The device must remain disabled until reactivated at the point of sale.
C.
The electronic game system must be secure from all other site communication systems and users at a gambling site.
Subp. 30.
Firewall protection.
All communications must pass through at least one application-level firewall recognized by the certified testing laboratory. Redundant communications methods are allowed if equally protected by a firewall. Each linked bingo game provider and manufacturer shall implement and maintain communications methods, including any redundancy, separate from other linked bingo game providers and manufacturers. The firewall application must maintain an audit log of the following information and must disable all communications if unauthorized access is detected:
Subp. 31.
Remote access.
Where permitted by the board, remote access must authenticate all computer systems based on the authorized settings or firewall application. The following are additional requirements:
B.
no unauthorized access to any database other than information retrieval using existing functions;
Subp. 32.
Data access by board.
The system must include on-demand remote access at all times by the board to all electronic reporting data without participation of the linked bingo game provider or the distributor.
Subp. 33.
Test system and equipment.
Linked bingo game providers must provide a test system and equipment to the Gambling Control Board, at the linked bingo game provider's expense, to test pending and approved games.
Subp. 34.
Test software.
A.
Linked bingo game providers must provide identical software to the board as part of system approval by an independent testing laboratory and must disable the ability to write to the hard drive.
B.
Linked bingo game providers must allow regulatory test software to be added to an electronic game system to verify approved product.
Subp. 35.
Activation of daubing.
The system must acknowledge that a player has activated the daubing process.
Subp. 36.
Prior board approval required for electronic gambling equipment; conformance with standards for previously approved electronic gambling equipment; independent laboratory testing required for certain electronic gambling equipment.
This subpart applies to board approval of electronic gambling equipment, conformance with standards for previously approved electronic gambling equipment, and independent laboratory testing required for certain electronic gambling equipment.
A.
Before the sale, lease, or distribution of any electronic gambling equipment in Minnesota, a linked bingo game provider must obtain prior board approval for the electronic gambling equipment. The linked bingo game provider must provide to the director at no charge the following:
(3)
the electronic linked bingo test system and equipment to be used to determine compliance with this part.
B.
Electronic gambling equipment must be received by the board on or before the 15th day of the month to ensure consideration at the board's meeting the following month.
C.
The board must notify the linked bingo game provider in writing no later than five days after a board meeting of the board's decision on whether the product is approved for sale in Minnesota.
D.
For changes to the payout structure for any approved game, the linked bingo game provider must assign a new game identification and submit the game for review and approval by the board before being offered for sale in Minnesota.
E.
For changes to approved electronic gambling equipment, the linked bingo game provider must submit the changes to the director for review, and, if required by the director, equipment must be submitted for review and approval by the board.
(1)
The version of gambling equipment containing changes approved by the director under this item is the only version of gambling equipment allowed to be available for sale in Minnesota.
(2)
Handheld, portable electronic devices with power cords approved before July 15, 2019, may remain in play for 180 days from July 15, 2019, at which time the devices must be permanently removed from play. All other previously approved electronic gambling equipment approved before July 15, 2019, must come into compliance within 180 days of July 15, 2019.
F.
Within 14 days of receipt of an electronic linked bingo game, the director must notify the linked bingo game provider in writing of the director's decision to recommend approval or recommend denial.
(1)
The written notice of the director's recommended denial must state the basis for the director's recommendation of denial. Within 14 days of receipt of a notice of the director's recommended denial, the linked bingo game provider may request a contested case hearing under Minnesota Statutes, chapter 14.
G.
Linked bingo game providers are in compliance if the electronic gambling equipment is approved by the board and is produced in compliance with the standards prescribed in this part. Once approved, a linked bingo game provider may not change the equipment without prior approval of the board, in compliance with this subpart and part 7863.0260, subpart 1a. The board shall withdraw its approval if it determines that the electronic gambling equipment:
(2)
is defective and the defect is not immediately corrected and submitted for reapproval by the board for sale in Minnesota.
If the board decides that its approval should be withdrawn, the board will notify the linked bingo game provider of its right to request a contested case hearing under Minnesota Statutes, chapter 14.
H.
Not later than December 31 of each calendar year, a linked bingo game provider must submit to the board, on a form prescribed by the board, a list of all board-approved games that it intends to sell in Minnesota. Any board-approved game not included on the linked bingo game provider's list, or any board-approved game that has not been played by a licensed organization in Minnesota in the previous two calendar years, will be considered abandoned by the linked bingo game provider and will be removed from the board's approved games database. Nothing in this subpart prohibits a linked bingo game provider from voluntarily informing the board at any time of an abandoned game. A voluntarily abandoned game may not be provided by a linked bingo game provider for play in Minnesota unless the game is reapproved by the director.
I.
Independent testing requirements for electronic gambling equipment when required by the board shall include a certification from a board-approved testing laboratory that the electronic gambling equipment tested meets the electronic linked bingo standards and requirements as established in Minnesota Statutes and Minnesota Rules and in conformance with game procedures as provided by the linked bingo game provider. The certification must include:
(1)
a detailed description of the equipment and related software applications that were tested, including applicable model numbers of specific equipment and the software version of the application used for testing;
(4)
any additional findings or issues of concern that might affect the performance or play of the equipment.
J.
Independent testing of electronic gambling equipment includes:
(6)
software applications and version upgrades used in conjunction with lawful gambling equipment;
(7)
user-acceptance testing, which ensures the different functionalities of the system and software work as they would in real-life scenarios. User-acceptance testing includes accurate game simulation; and
History:
38 SR 1613; 41 SR 137; 44 SR 25
Published Electronically:
January 30, 2024
Official Publication of the State of Minnesota
Revisor of Statutes