[50 Pa.B. 4248]
[Saturday, August 22, 2020]
[Continued from previous Web Page]
CHAPTER 810a. INTERACTIVE GAMING
TESTING AND CONTROLSSec.
810a.1. Scope. 810a.2. Definitions. 810a.3. Minimum game standards. 810a.4. Minimum display standards. 810a.5. Random number generator standards. 810a.6. Software authentication. 810a.7. Changes to game. 810a.8. Game rules. 810a.9. Fairness. 810a.10. Prohibitions. 810a.11. Controls. 810a.12. Test accounts. § 810a.1. Scope.
To ensure players are not exposed to unnecessary security risks by choosing to participate in interactive gaming in this Commonwealth and to ensure the integrity and security of interactive gaming operations in this Commonwealth, this chapter applies to all games an interactive gaming certificateholder or interactive gaming operator seeks to offer to players in this Commonwealth.
§ 810a.2. Definitions.
The following words and terms, when used in this chapter, have the following meanings, unless the context clearly indicates otherwise:
Artwork or art—Graphical and auditory information that is sent to the player device for presentation to the player.
Game cycle—The finite set of all possible combinations.
Player interface—The interface within the software in which the player interacts. The term is also referred to as the gaming window.
Progressive jackpot—
(i) An increasing prize based on a function of credits that are wagered.
(ii) A monetary prize that increases in value based on a function of credits wagered.
(iii) The term includes prizes that are awarded based on criteria other than obtaining winning outcomes in the game, such as mystery progressives.
§ 810a.3. Minimum game standards.
All of the following requirements apply to the game information, artwork, paytables and help screens which include all written, graphical and auditory information provided to the player either directly from the game interface or from a page accessible to the player from the game interface through a hyperlink located in a conspicuous location.
(1) All statements and graphics within the gaming information, artwork, paytables and help screens must be accurate and not misleading.
(2) All game rules and paytable information must be available to the player directly on the player interface or accessible from the player interface through a hyperlink without the need for funds to be deposited or funds to be staked.
(3) All game rules and paytable information must be sufficient to explain all the applicable rules and how to participate in all stages of the game.
(4) Paytable information must include all possible winning outcomes, patterns, rankings and combinations, and their corresponding payouts with a designated denomination or currency. All displayed payouts must be theoretically possible.
(5) The rules of the game must inform the players of the imperfections of the communications medium for the game and how this affects them.
(6) There must be sufficient information regarding any award payout adjustments such as fees, rakes, commissions, and the like.
(7) If the artwork contains game instructions specifying a maximum win then it must be possible to win this amount from a single game (including features or other game options).
(8) For games that offer bonus bets that require a base game bet, the minimum percentage return to player of the bonus bet must take into account that a base game bet must be placed.
(9) If random/mystery prizes are offered, the maximum value obtainable from the random/mystery prize must be indicated. If the value of the random/mystery prize depends on credits wagered or any other factors, this must be stated.
(10) The artwork should clearly state the rules for payments of prizes when multiple wins are possible.
(i) A description of what combinations will be paid when a pay line may be interpreted to have more than one individual winning combination (''only highest paid win per line'').
(ii) When the game supports multiple pay lines, the artwork should display a message indicating wins on different pay lines are added or equivalent.
(iii) When the game supports scatters, artwork should display a message indicating that scattered wins are added to pay line wins, or equivalent, if this is the rule of the game.
(iv) The artwork should clearly communicate the treatment of coinciding scattered wins with respect to other possible scattered wins. For example, the artwork should state whether combinations of scattered symbols pay all possible prizes or only the highest prize.
(v) The artwork should clearly communicate the treatment of coinciding game outcome (that is, straight flush can be a flush and a straight, three red 7s can be any three 7s).
(11) If it is possible to bet on multiple lines and it is not clear which reel positions are part of each of the possible lines, then the additional lines must be clearly displayed on the artwork and appropriately labeled. The additional lines must either be shown on the displayed artwork, be available for display on a help screen or permanently displayed on all game-play screens in a location separate from the actual reels.
(12) When multiplier instructions are displayed on artwork, there must be no question as to whether the multiplier applies.
(13) All game symbols and objects must be clearly displayed to the player and not be misleading in any way. Game symbols and objects must retain their shape throughout all artwork, except while animation is in progress.
(14) The artwork must clearly state which symbols and objects may act as a substitute or wild and in which winning combinations the substitute/wild may be applied.
(15) The artwork must clearly state which symbols and objects may act as scatter and in which winning combinations the scatter may be applied.
(16) The game may not advertise upcoming wins unless the advertisement is accurate and mathematically demonstrable.
(17) All of the following requirements apply to games depicting cards being drawn from a deck:
(i) A game which utilizes multiple decks of cards must clearly indicate the number of cards and card decks in play.
(ii) Once removed from the deck, cards may not be returned to the deck except as provided by the rules of the game depicted.
(iii) The deck may not be reshuffled except as provided by the rules of the game depicted.
(18) All of the following requirements apply to multiwager games:
(i) Each individual wager to be played must be clearly indicated to inform the player as to which wagers have been made and the credits bet per wager.
(ii) Each winning prize obtained must be displayed to the player in a way that clearly associates the prices to the appropriate wager. When there are wins associated with multiple wagers, each winning wager must be indicated in turn.
§ 810a.4. Minimum display standards.
All of the following game information must be visible or easily accessible to the player at all times during a player session:
(1) The name of the game being played.
(2) Restrictions on play or betting such as any play duration limits, maximum win values, and the like.
(3) The player's current session balance.
(4) The current bet amount. This is only during the phase of the game when the player can add to or place additional bets for that phase.
(5) Current placement of all bets.
(6) The denomination of the bet.
(7) The amount won for the last completed game (until the next game starts or betting options are modified).
(8) The player options selected for the last completed game (until the next game starts or a new selection is made).
(9) Initial player section options are to be described. Player selection options once the game has commenced should be clearly shown on the screen.
(10) The winning amount for each separate wager and total winning amount are to be displayed on the screen.
§ 810a.5. Random number generator standards.
(a) The random number generator must be cryptographically strong at the time of submission for approval. When more than one instance of a random number generator is used in an interactive gaming system, each instance must be separately evaluated and certified. When each instance is identical but involves a different implementation within a game/application, each implementation shall also be separately evaluated and certified. Any outcomes from the random number generator used for game symbol selection/game outcome determination must be shown, by data analysis and a source code read, to:
(1) Be statistically independent, unless the submission has been approved for a persistent-state outcome determination.
(2) Be fairly distributed (within statistically expected bounds) over their range.
(3) Pass various recognized statistical tests.
(4) Be cryptographically strong.
(b) Random number generators must adhere to standards in § 461a.7 (relating to slot machine minimum design standards).
(c) The gaming laboratory may employ the use of various recognized tests to determine whether or not the random values produced by the random number generator pass the desired confidence level of 95%. These tests include the following:
(1) Chi-square test.
(2) Equi-distribution (frequency) test.
(3) Gap test.
(4) Overlaps test.
(5) Poker test.
(6) Coupon collectors test.
(7) Permutation test.
(8) Kolmogorov-Smirnov test.
(9) Adjacency criterion tests.
(10) Order statistic test.
(11) Runs tests (patterns of occurrences should not be recurrent).
(12) Interplay correlation test.
(13) Serial correlation test potency and degree of serial correlation (outcomes should be independent of the previous game, unless the submission has been approved for a persistent-state outcome determination).
(14) Tests on subsequences.
(15) Poisson distribution.
(d) The scaling method may not compromise the cryptographic strength of the random number generator. The scaling method must preserve the distribution of the scaled values. For example, if a 32-bit random number generator with a range of the set of integers in the closed interval [0, 232-1] were to be scaled to the range of the set of integers in the closed interval [1, 6] so that the scaled values can be used to simulate the roll of a standard six-sided die, then each integer in the scaled range should theoretically appear with equal frequency. In the example given, if the theoretical frequency for each value is not equal, then the scaling method is considered to have a bias. Thus, a compliant scaling method must have bias equal to zero.
(e) If the interactive gaming system utilizes hard-based random number generators, there must be dynamic/active, real-time monitoring of the output with a sample size large enough to allow for reasonably high statistically powerful testing so that game play is disabled when an output testing failure is detected.
(f) If the interactive gaming system utilizes a software-based random number generator, it must adhere to all of the following:
(1) The period of the random number generator, in conjunction with the methods of implementing the random number generator outcomes, must be sufficiently large to ensure that all game independent outcome combinations/permutations are possible for the given game/application, unless the submission has been approved for a persistent-state outcome determination.
(2) The methods of seeding/reseeding must ensure that all seed values are determined in a manner that does not compromise the cryptographic security of the random number generator.
(3) To ensure that random number generator outcomes cannot be predicted, adequate background cycling/activity must be implemented in between games. Whenever a game outcome is made up of multiple mapped random number generator values, background cycling/activity must be implemented during the game (that is, in between the selection of each mapped random number generator value) to ensure that the game outcome is not comprised of sequential mapped random number generator outcomes. The rate of background cycling/activity must be sufficiently random in and of itself to prevent prediction.
§ 810a.6. Software authentication.
The acquisition and development of new software must follow defined processes in accordance with the information security policy.
(1) The production environment must be logically and physically separated from the development and test environments.
(2) Development staff shall be precluded from having access to promote code changes into the production environment.
(i) If, due to staffing limitations, this requirement cannot be met by the entity, the internal controls submitted to the Board shall describe what measures will be implemented to ensure the integrity of interactive games in the production environment.
(3) There must be a documented method to verify that test software is not deployed to the production environment.
(4) To prevent leakage of personal identifiable information, there must be a documented method to ensure that raw production data is not used in testing.
(5) All documentation relating to software and application development should be available and retained for the duration of its lifecycle.
§ 810a.7. Changes to game.
A change or modification to an interactive game shall be handled in accordance with the Change Management guidelines issued and distributed to interactive gaming certificateholders, interactive gaming operators, and interactive gaming manufacturers.
§ 810a.8. Game rules.
(a) Interactive gaming certificateholders and interactive gaming operators shall adopt and adhere to written, comprehensive house rules governing wagering transactions by and between authorized players that are available for review at all times by players through a conspicuously displayed link. House rules must include all of the following:
(1) Clear and concise explanation of all fees.
(2) The rules of play of a game.
(3) Any monetary wagering limits.
(4) Any time limits pertaining to the play of a game.
(b) House rules must be approved by the Board.
(c) House rules that deviate from Board regulations shall be submitted to the Board's Office of Gaming Laboratories for review and approval prior to submission to the Board for approval prior to implementation.
§ 810a.9. Fairness.
(a) All critical functions including the generation of the result of any game (and the return to the player) must be generated by the interactive gaming platform and be independent of the player device. All of the following also apply:
(1) Game outcome may not be affected by the effective bandwidth, link utilization, bit error rate or other characteristic of the communications channel between the interactive gaming platform and the player device.
(2) Determination of events of chance that result in a monetary award may not be influenced, affected or controlled by anything other than numerical values derived in an approved manner from the certified random number generator when applicable and in conjunction with the rules of the game.
(3) Each possible permutation or combination of game elements that produces winning or losing game outcomes must be available for random selection at the initiation of each play, unless otherwise denoted by the game.
(4) As game symbols are selected/game outcomes are determined, they must be immediately used as directed by the rules of the game.
(5) When the game requires a sequence or mapping of symbols or outcomes to be set up in advance, the symbols or outcomes should not be resequenced or remapped, except as provided for in the rules of the game.
(6) After selection of the game outcome, the game may not make a variable secondary decision which affects the result shown to the player.
(7) Except as provided by the rules of the game, events of chance within games should be independent and not correlated with any other events within the game or events within the previous game, unless the submission has been approved for a persistent-state outcome determination.
(8) For game types such as a spinning reel game, unless otherwise disclosed to the player, the mathematical probability of a symbol appearing in a position for any game outcome must be constant.
(b) A game may not be designed to give the player a false expectation of better odds by misrepresenting any occurrence or event.
(1) Games that are designed to give the player the perception that they have control over the game due to player skill when they actually do not must fully address this behavior in the game help screens.
(2) The final outcome of each game must be displayed for a sufficient length of time that permits a player to verify the outcome of the game.
§ 810a.10. Prohibitions.
(a) Forced game play.
(1) The player may not be forced to play a game just by selecting that game.
(2) It must not be possible to start a new game in the same player interface instance before all relevant meters have been updated on the interactive game system and all other relevant connections and player session balance or, if applicable, the player's total balance has been updated.
(3) If an auto play mode is incorporated, it must be possible to turn this mode off at any time during game play.
(b) Bots and computerized players. Bots or computerized players are only permitted when employed by the interactive gaming system in free play or training mode, or if use of the bot or computerized player satisfies all of the following:
(1) The use of artificial intelligence software must be clearly explained in the help menus.
(2) All computerized players must be clearly marked at the tables so that players are aware of which players are not human.
(c) Incomplete games. A game is incomplete when the game outcome remains unresolved or the outcome cannot be properly seen by the player.
(1) The interactive gaming certificateholder or interactive gaming operator may provide a mechanism for a player to complete an incomplete game.
(2) Incomplete games shall be resolved before a player is permitted to participate in another instance of the same game.
(3) Wagers associated with an incomplete game must be voided within 30 days and the wagers can be forfeited or returned to the player provided that:
(i) The terms and conditions or the game rules, or both, must clearly define how wagers will be handled when they remain undecided beyond the specified time period and the interactive gaming system must be capable of returning or forfeiting the wagers, as appropriate.
(ii) In the event that a game cannot be continued due to an interactive gaming system action, all wagers must be returned to the players of that game.
(d) Auto play prohibited. Game play shall be initiated only after a patron has affirmatively placed a wager and activated play. An auto play feature is not permitted in game software unless authorized by the Board, and if permitted shall not exceed 50 spins.
§ 810a.11. Controls.
(a) A replay last game feature either as a re-enactment or by description must be available to players. The replay must clearly indicate that it is a replay of the entire previous game cycle, and must provide, at a minimum, all of the following information:
(1) The date and time the game started or ended, or both.
(2) The display associated with the final outcome of the game, either graphically or by a clear text message.
(3) Total player cash/credits at start or end of play, or both.
(4) Total amount bet.
(5) Total cash/credits won for the prize (including progressive jackpots).
(6) The results of any player choices involved in the game outcome.
(7) Results of any intermediate game phases, such as gambles or feature games.
(8) Amount of any promotional awards received, if applicable.
(b) For each individual game played, all of the following information must be recorded, maintained and easily demonstrable by the interactive gaming system:
(1) Unique player ID.
(2) Contributions to progressive jackpot pools, if applicable.
(3) Game status (in progress, complete, and the like).
(4) The table number, if applicable, at which the game was played.
(5) The paytable used.
(6) Game identifier and version.
(c) An organized event that permits a player to either purchase or be awarded the opportunity to engage in competitive play against other players may be permitted providing all of the following rules are met:
(1) While enabled for tournament play, a game may not accept real money from any source, nor pay out real money in any way, but must utilize tournament specific credits, points or chips which have no cash value.
(2) Interactive gaming contest/tournament rules are available to a player on the web site where the interactive gaming contest/tournament is being conducted. The rules must include, at a minimum, all of the following:
(i) All conditions players shall meet to qualify for entry into and advancement through the contest/tournament.
(ii) Any conditions concerning late arrivals or complete tournament no-shows and how auto-blind posting or initial entry purchase, or both, is handled.
(iii) Specific information pertaining to any single contest/tournament, including the amount of money placed in the prize pool.
(iv) The distribution of funds based on specific outcomes.
(v) The name of the organization or person that conducted the contest/tournament on behalf of, or in conjunction with, the operator, if applicable.
(3) The results of each contest/tournament shall be made available on the interactive gaming web site for the players to review. Subsequent to being posted on the web site, the results of each contest/tournament shall be available upon request. The recording must include all of the following:
(i) Name of the event.
(ii) Date of event.
(iii) Total number of entries.
(iv) Amount of entry fees.
(v) Total prize pool.
(vi) Amount paid for each winning category.
(d) All of the following requirements apply to the disabling and re-enabling of gambling on the interactive gaming system:
(1) The interactive gaming system must be able to disable or enable all gambling on command.
(2) When any gambling is disabled or enabled on the interactive gaming system an entry must be made in an audit log that includes the reason for any disable or enable.
(e) When a game or gaming activity is disabled:
(1) The game is not to be accessible to a player once the player's game has fully concluded.
(2) The player should be permitted to conclude the game in play (that is, bonus rounds, double up/gamble and other game features related to the initial game wager should be fully concluded).
(3) If wagers have been placed on pending real-life events:
(i) The terms and conditions must clearly define what happens to the wagers if the gaming activity is to remain disabled and the corresponding real-life event is completed, and the interactive gaming system must be capable of returning all bets to the players or settling all bets, as appropriate.
(ii) The terms and conditions must clearly define what happens to the wagers if the gaming activity is to re-enable before the corresponding real-life event is completed, and the interactive gaming system must be capable of returning all bets to the players, or leaving all bets active, as appropriate.
(f) When one or more feature/bonus prize may be paid to the player, the bonus game must be part of the overall paytable theoretical return to player.
(g) All progressive jackpots must adhere to all of the following:
(1) All players that play progressive jackpot games must be made aware of actions which would make them eligible to win the progressive jackpot.
(2) When progressive jackpot contributions are part of the return to player calculation, the contributions may not be assimilated into revenue. If a cap is established on any progressive jackpot all additional contributions once that cap is reached are to be credited to a diversion pool.
(3) The rules of the game must incorporate how the progressive jackpot is funded and determined.
(4) If a minimum bet amount exists for a player to win a progressive jackpot, then the return to player (excluding the progressive jackpot) must meet the minimum player return in accordance with § 461a.7(a) (relating to slot machine minimum design standards). The calculation of the theoretical payout percentage may not include the amount of any progressive jackpot in excess of the initial reset amount.
(5) The current progressive jackpot amount should be displayed on all player devices participating in the progressive jackpot. This display should be updated on all participating player devices at least every 30 seconds.
(6) The rules of the game must inform the players of any maximum awards or time limits, or both, which may exist for each progressive jackpot.
(7) For progressive jackpots offering multiple levels of awards, the player must always be paid the higher amount if a particular combination is won that should trigger the higher paying award. This may occur when a winning combination may be evaluated as more than one of the available paytable combinations (that is, a flush is a form of a straight flush and a straight flush is a form of a royal flush). There may be situations when the progressive jackpot levels must be swapped to ensure the player is being awarded the highest possible value based on all combinations the outcome may be defined as.
(8) If multiple progressive jackpots occur at approximately the same time and there is no definitive way of knowing which jackpot occurred first, the operator shall adopt procedures, approved by the Board, for resolution. The rules of the game must include information which addresses the resolution of this possibility.
(9) All progressive jackpots must adhere to standards in § 461a.12 (relating to progressive slot machines) and § 461a.13 (relating to wide area progressive systems), except for any physical requirements deemed inapplicable by the Board and subject to the following modifications:
(i) Notice of intent to transfer a progressive jackpot must be conspicuously displayed on the interactive game icon and at all times during a gameplay by means of methodology approved by the Board for a period at least 10 days immediately preceding the transfer of the progressive jackpot.
(ii) Within § 461a.12, the term ''gaming floor'' used regarding land-based progressives shall be analogous to the term ''interactive gaming platform'' used regarding interactive gaming progressives.
§ 810a.12. Test accounts.
(a) Interactive gaming certificateholders and interactive gaming operators may establish test accounts to be used to test the various components and operation of an interactive gaming system in accordance with internal controls, which, at a minimum, address all of the following:
(1) The procedures for the issuance of funds used for testing, including the identification of who is authorized to issue the funds and the maximum amount of funds that may be issued.
(2) The procedures for assigning each test account for use by only one person.
(3) The maintenance of a record for all test accounts to include when they are active, to whom they are issued and the employer of the person to whom they are issued.
(4) The procedures for the auditing of testing activity by the interactive gaming certificateholder or interactive gaming operator to ensure the accountability of funds used for testing and proper adjustments to gross interactive gaming revenue.
(5) The ability to withdraw funds from a test account without the Board's prior approval must be disabled by the interactive gaming system.
(6) For testing of peer-to-peer games:
(i) A person may utilize multiple test accounts.
(ii) Test account play shall be conducted without the participation of players.
(b) In addition to the required internal controls in subsection (a)(1)—(6), for any wagering on test accounts conducted outside the boundaries of this Commonwealth, the procedures for auditing of testing activity must include the method for ascertaining the location from which persons using test accounts access the interactive gaming system.
CHAPTER 811a. INTERACTIVE GAMING ACCOUNTING AND INTERNAL CONTROLS Sec.
811a.1. Scope. 811a.2. Internal controls. 811a.3. Terms and conditions. 811a.4. Information to be displayed on web site. 811a.5. Segregation of bank accounts and reserve requirements. 811a.6. Interactive gaming certificateholder's or interactive gaming operator's organization. 811a.7. Mandatory interactive gaming system logging. 811a.8. Records/data retention requirements. 811a.9. Required reports; reconciliation. § 811a.1. Scope.
To ensure the integrity and security of interactive gaming operations in this Commonwealth, this chapter applies to all interactive gaming certificateholders or interactive gaming operators seeking to offer interactive gaming to patrons in this Commonwealth.
§ 811a.2. Internal controls.
(a) At least 90 days prior to commencing interactive gaming under this part, an interactive gaming certificateholder or interactive gaming operator shall submit to the Board for approval internal controls for all aspects of interactive gaming prior to implementation and any time a change is made thereafter. The internal controls must include detailed procedures for system security, operations, accounting, and reporting of compulsive and problem gamblers.
(b) Notwithstanding subsection (a), the procedures and controls may be implemented by an interactive gaming certificateholder or interactive gaming operator upon the filing of the procedures and controls with the Board. Each procedure or control submission must contain narrative and diagrammatic representations of the system to be utilized and must include all of the following:
(1) Procedures for reliable accounting controls, including the standardization of forms and definition of terms to be utilized in the interactive gaming operations.
(2) Procedures, forms and, when appropriate, formulas to govern all of the following:
(i) Calculation of hold percentages.
(ii) Revenue drops.
(iii) Expense and overhead schedules.
(iv) Complimentary services.
(v) Cash-equivalent transactions.
(3) Job descriptions and the system of personnel and chain of command establishing a diversity of responsibility among employees engaged in interactive gaming operations, including employees of an interactive gaming operator, and identifying primary and secondary management and supervisory positions for areas of responsibility, salary structure and personnel practices.
(4) Procedures for the registration of players and establishment of interactive gaming accounts, including a procedure for authenticating the age, identity and physical address of an applicant for an interactive gaming account and whether the applicant is a person prohibited from establishing or maintaining an account under section 13B22 of the act (relating to establishment of interactive gaming accounts).
(5) Procedures for terminating a registered player's interactive gaming account and the return of any funds remaining in the interactive gaming account to the registered player.
(6) Procedures for suspending or terminating a dormant interactive gaming account and the return of any funds remaining in the dormant interactive gaming account to the registered player.
(7) Procedures for the logging in and authentication of a registered player to enable the player to commence interactive gaming and the logging off of the registered player when the player has completed play, including a procedure to automatically log a registered player out of the player's interactive gaming account after a specified period of inactivity.
(8) Procedures for the crediting and debiting of a registered player's interactive gaming account.
(9) Procedures for cashing checks, receiving electronic negotiable instruments, and redeeming chips, tokens or other cash equivalents.
(10) Procedures for withdrawing funds from an interactive gaming account by the registered player.
(11) Procedures for the protection of a registered player's funds, including the segregation of a registered player's funds from operating funds of the interactive gaming certificateholder or interactive gaming operator.
(12) Procedures for recording transactions pertaining to interactive gaming.
(13) Procedures for the security and sharing of personal identifiable information of a registered player, funds in an interactive gaming account and other information as required by the Board. The procedures must include the means by which an interactive gaming certificateholder or interactive gaming operator will provide notice to a registered player related to the sharing of personal identifiable information. For the purpose of this paragraph, ''personal identifiable information'' means any data or information that can be used, on its own or with other data or information, to identify, contact or otherwise locate a registered player, including a registered player's name, address, date of birth and Social Security number.
(14) Procedures and security for the calculation and recordation of revenue.
(15) Procedures for the security of interactive gaming devices and associated equipment.
(16) Procedures and security standards as to receipt, handling, and storage of interactive gaming devices and associated equipment.
(17) Procedures and security standards to protect the interactive gaming certificateholder's or interactive gaming operator's interactive gaming skin or interactive gaming web site and interactive gaming devices and associated equipment from hacking or tampering by any person.
(18) Procedures for responding to suspected or actual hacking or tampering with an interactive gaming certificateholder's or interactive gaming operator's interactive gaming skin or interactive gaming web site and interactive gaming devices and associated equipment, including partial or complete suspension of interactive gaming or the suspension of any or all interactive gaming accounts when warranted.
(19) Procedures to verify each registered player's physical location each time a registered player logs into his interactive gaming account and at appropriate intervals thereafter as determined by the Board.
(20) Procedures to ensure that the interactive games are fair and honest and that appropriate measures are in place to deter, detect and, to the extent possible, prevent cheating, including collusion and use of cheating devices, including the use of software programs that make wagers according to algorithms.
(21) Procedures to assist problem and compulsive gamblers, including procedures intended to prevent a person from participating in authorized interactive gaming who is otherwise prohibited from participating in interactive gaming.
(22) Procedures to govern emergencies, including suspected or actual cyber-attacks, hacking or tampering with the interactive gaming certificateholder's interactive gaming skin, interactive gaming platform or interactive gaming web site. The procedures must include the process for the reconciliation or repayment of a registered player's interactive gaming account.
(c) The submission required under subsections (a) and (b) must include a detailed description of the interactive gaming certificateholder's or interactive gaming operator's administrative and accounting procedures related to interactive gaming, including its written system of internal controls. Each written system of internal controls must include all of the following:
(1) An organizational chart depicting appropriate duties and responsibilities of the key employees involved in interactive gaming.
(2) A description of the duties and responsibilities of each position shown on the organizational chart.
(3) The record retention policy of the interactive gaming certificateholder or interactive gaming operator.
(4) The procedure to be utilized to ensure that money generated from the conduct of interactive gaming is safeguarded and accounted for.
(5) Procedures to ensure that recorded accountability for assets is compared with actual assets at intervals required by the Board and appropriate action is taken with respect to discrepancies.
(6) Procedures to be utilized by an employee of an interactive gaming certificateholder or interactive gaming operator in the event of a malfunction of an interactive gaming system or other equipment used in the conduct of interactive gaming.
(7) Procedures to be utilized by the interactive gaming certificateholder or interactive gaming operator to prevent persons under 21 years of age, self-excluded or involuntary excluded individuals, and players outside this Commonwealth, unless otherwise authorized by an interactive gaming reciprocal agreement, from engaging in interactive gaming.
(8) Other items the Board may request in writing to be included in the internal controls.
(d) Prior to authorizing an interactive gaming certificateholder or interactive gaming operator to commence the conduct of interactive gaming, the Board will review the system of internal controls, security protocols and audit protocols submitted under this chapter to determine whether they conform to the requirements of this chapter and whether they provide adequate and effective controls for the conduct of interactive gaming.
(e) If an interactive gaming certificateholder or interactive gaming operator intends to make a change or amendment to its system of internal controls, it shall submit the change or amendment electronically to the Bureau of Gaming Operations in a manner prescribed by the Bureau of Gaming Operations. The interactive gaming certificateholder or interactive gaming operator may implement the change or amendment on the 30th calendar day following the filing of a complete submission unless the interactive gaming certificateholder or interactive gaming operator receives written notice tolling the change or amendment in accordance with this chapter or written notice from the Board's Executive Director rejecting the change or amendment.
(f) If during the 30-day review period in this chapter, the Bureau of Gaming Operations preliminarily determines that a procedure in a submission contains an insufficiency likely to negatively affect the integrity of interactive gaming or the control of revenue generated from interactive gaming, the Bureau of Gaming Operations, by written notice to the interactive gaming certificateholder or interactive gaming operator, will:
(1) Specify the nature of the insufficiency and, when possible, an acceptable alternative procedure.
(2) Direct that the 30-calendar day review period in this chapter is to be tolled and that any internal controls at issue not be implemented until approved under this chapter.
(g) Examples of submissions that may contain an insufficiency likely to negatively affect the integrity of interactive gaming may include the following:
(1) Submissions that fail to provide information sufficient to permit the review of interactive gaming activities by the Board, the Bureau, the Department or law enforcement.
(2) Submissions that fail to provide for the segregation of incompatible functions so that an employee is not in a position to commit an error and perpetrate a fraud and to conceal the error or fraud in the normal course of the employee's duties.
(3) Submissions that do not include forms or other materials referenced in the submission or required under the act or this part.
(4) Submissions that would implement operations or accounting procedures not authorized by the act or this part.
(h) Whenever a change or amendment has been tolled under this chapter, the interactive gaming certificateholder or interactive gaming operator may submit a revised change or amendment within 30 days of receipt of the written notice from the Bureau of Gaming Operations. The interactive gaming certificateholder or interactive gaming operator may implement the revised change or amendment upon receipt of written notice of approval from the Board's Executive Director or on the 30th calendar day following the filing of the revision unless the interactive gaming certificateholder or interactive gaming operator receives written notice tolling the change or amendment in accordance with this chapter or written notice from the Board's Executive Director rejecting the change or amendment.
§ 811a.3. Terms and conditions.
(a) An interactive gaming certificateholder or interactive gaming operator shall develop terms and conditions for interactive gaming which must be included in the internal controls. The terms and conditions and any changes thereto shall be acknowledged by the player and the acknowledgment must be date and time-stamped by the interactive gaming system.
(b) The terms and conditions must address all aspects of the interactive gaming operation, including all of the following:
(1) The name of the party with whom the player is entering into a contractual relationship, including any interactive gaming certificateholder or interactive gaming operator.
(2) The player's consent to have the interactive gaming certificateholder or interactive gaming operator confirm the player's age and identity.
(3) Rules and obligations applicable to the player other than rules of the game including all of the following:
(i) Prohibition from allowing any other person to access or use his interactive gaming account.
(ii) Prohibition from engaging in interactive gaming activity, unless the player is physically located in this Commonwealth, unless such gaming is authorized by an interactive gaming reciprocal agreement.
(iii) Consent to the monitoring and recording by the interactive gaming certificateholder, interactive gaming operator or the Board, or all of the above, of any wagering communications and geographic location information.
(iv) Consent to the jurisdiction of this Commonwealth to resolve any disputes arising out of interactive gaming.
(v) Prohibition against utilizing automated computerized software or other equivalent mechanism, such as a bot, to engage in play.
(4) Full explanation of all fees and charges imposed upon a player related to interactive gaming transactions.
(5) Availability of account statements detailing player account activity.
(6) Privacy policies, including information access and use of customer data.
(7) Legal age policy, including a statement that it is a criminal offense to allow a person who is under 21 years of age to participate in interactive gaming and a player who does so must be prohibited from interactive gaming.
(8) Notification that if the player's interactive gaming account remains dormant for 2 year any funds remaining on deposit and any pending wagers shall be forfeited.
(9) The player's right to set responsible gaming limits and self-exclude.
(10) The player's right to suspend his account for no less than 72 hours.
(11) Actions that will be taken in the event a player becomes disconnected from the interactive gaming system during game play.
(12) Notice that a malfunction voids all pays.
(13) Estimated time-period for withdrawal of funds from the interactive gaming account.
(14) Detailed information to be displayed on a player protection page.
(15) Method for changing or retrieving a password or other approved access security feature and the ability to choose strong authentication login protection.
(16) Method for filing a complaint with the interactive gaming certificateholder or interactive gaming operator and method for filing with the Board an unresolved complaint after all reasonable means to resolve the complaint with the interactive gaming certificateholder or interactive gaming operator have been exhausted.
(17) Method for obtaining a copy of the terms and conditions agreed to when establishing an interactive gaming account.
(18) Method for the player to obtain account and game history from the interactive gaming certificateholder or interactive gaming operator.
(19) Notification of Federal prohibitions and restrictions regarding interactive gaming, specifically, any limitations upon interactive gaming in 18 U.S.C.A. § 1084 and the Unlawful Internet Gambling Enforcement Act of 2006 (31 U.S.C.A. §§ 5361—5367). The notice must explicitly state that it is a Federal offense for persons physically located outside of this Commonwealth to engage in interactive wagering through an interactive gaming certificateholder or interactive gaming operator unless explicitly authorized by the Board or an interactive gaming reciprocal agreement.
(20) Any other information required by the Board.
§ 811a.4. Information to be displayed on web site.
Interactive gaming certificateholders and interactive gaming operators shall provide for the prominent display of all of the following information on a page which, by virtue of the construction of the web site, authorized players must access before beginning a gambling session:
(1) The full name of the interactive gaming certificateholder or interactive gaming operator and address from which it carries on business.
(2) A logo, to be provided by the Board, indicating that the interactive gaming certificateholder or interactive gaming operator on behalf of the interactive gaming certificateholder is authorized to operate interactive gaming in this Commonwealth.
(3) The interactive gaming certificateholders and interactive gaming operator's license number.
(4) A statement that persons under 21 years of age are not permitted to engage in interactive gaming.
(5) A statement that persons located in a jurisdiction where interactive gaming is not legal are not permitted to engage in interactive gaming.
(6) Active links to all of the following:
(i) Information explaining how disputes are resolved.
(ii) A problem gambling web site that is designed to offer information pertaining to responsible gaming.
(iii) The Board's web site.
(iv) A web site that allows for an authorized player to choose to be excluded from engaging in interactive gaming.
(v) A link to the house rules adopted by the interactive gaming certificateholder or interactive gaming operator.
§ 811a.5. Segregation of bank accounts and reserve requirements.
(a) An interactive gaming certificateholder or interactive gaming operator shall maintain a bank account for player's funds separate from all other operating accounts to ensure the security of funds held in the player's interactive gaming accounts.
(b) The balance maintained in this account must be greater than or equal to the sum of the daily ending cashable balance of all player interactive gaming accounts, funds on game and pending withdrawals.
(c) An interactive gaming certificateholder or interactive gaming operator shall have unfettered access to all player interactive gaming account and transaction data to ensure the amount held in its independent account is sufficient. An interactive gaming certificateholder's or interactive gaming operator's chief financial officer shall file a quarterly attestation with the Board, unless otherwise directed by the Board, that the funds have been safeguarded under this section.
§ 811a.6. Interactive gaming certificateholder's or interactive gaming operator's organization.
(a) An interactive gaming certificateholder's or interactive gaming operator's systems of internal controls must include organization charts depicting segregation of functions and responsibilities and descriptions of the duties and responsibilities for each position shown on each organization chart. Interactive gaming certificateholders and interactive gaming operators are permitted, except as otherwise provided in this section, to tailor organizational structures to meet the needs or policies of a particular management philosophy. An interactive gaming certificateholder's and interactive gaming operator's organization charts must provide for all of the following:
(1) A system of personnel and chain of command which permits management and supervisory personnel to be held accountable for actions or omissions within their areas of responsibility.
(2) The segregation of incompatible functions, duties and responsibilities so that an employee is not in a position to commit an error and perpetrate a fraud and to conceal the error or fraud in the normal course of the employee's duties.
(3) The performance of all functions, duties and responsibilities in accordance with sound financial practices by qualified personnel.
(4) The areas of responsibility which are not so extensive as to be impractical for an individual to monitor.
(b) In addition to other positions required as part of an interactive gaming certificateholder's or interactive gaming operator's internal controls, an interactive gaming certificateholder or interactive gaming operator shall maintain an information technology department supervised by an individual licensed as a key employee who functions, for regulatory purposes, as the information technology director. An interactive gaming certificateholder or interactive gaming operator shall employ an information technology security officer and an interactive gaming manager, both of whom shall be licensed as a key employee.
(c) The information technology director shall be responsible for the integrity of all data, and the quality, reliability and accuracy of all computer systems and software used by the interactive gaming certificateholder in the conduct of interactive gaming, whether the data and software are located within or outside the certificateholder's or interactive gaming operator's facility, including, without limitation, specification of appropriate computer software, hardware and procedures for security, physical integrity, audit and maintenance of all of the following:
(1) Access codes and other computer security controls used to insure appropriately limited access to computer software and data.
(2) Monitoring logs of user access, security incidents and unusual transactions.
(3) Logs used to document and maintain the details of any hardware and software modifications.
(4) Computer tapes, disks or other electronic storage media containing data relevant to interactive gaming operations.
(5) Computer hardware, communications equipment and software used in the conduct of interactive gaming.
(d) The information technology security officer shall report to the information technology director and be responsible for all of the following:
(1) Maintaining access codes and other computer security controls used to insure appropriately limited access to computer software and data.
(2) Reviewing logs of user access, security incidents and unusual transactions.
(3) Coordinating the development of the interactive gaming certificateholder's or interactive gaming operator's information security policies, standards and procedures.
(4) Coordinating the development of an education and training program on information security and privacy matters for employees and other authorized users.
(5) Ensuring compliance with all State and Federal information security policies and rules.
(6) Preparing and maintaining security-related reports and data.
(7) Working with internal and external audit personnel to ensure all findings are addressed in a timely and effective manner.
(8) Developing and implementing an Incident Reporting and Response System to address security breaches, policy violations and complaints from external parties.
(9) Serving as the official contact for information security and data privacy issues, including reporting to law enforcement.
(10) Developing and implementing an ongoing risk assessment program that targets information security and privacy matters by identifying methods for vulnerability detection and remediation and overseeing the testing of those methods.
(11) Remaining current with the latest information technology security and privacy legislation, rules, advisories, alerts and vulnerabilities to ensure the interactive gaming certificateholder's or interactive gaming operator's security program and security software is effective.
(e) The interactive gaming manager shall report to the information technology director, or other department manager as approved by the Board, and be responsible for ensuring the proper operation and integrity of interactive gaming and reviewing all reports of suspicious behavior. The interactive gaming manager shall immediately notify the Bureau upon detecting any person participating in interactive wagering who is:
(1) Engaging in or attempting to engage in, or who is reasonably suspected of cheating, theft, embezzlement, collusion, money laundering or any other illegal activities.
(2) A self-excluded person under the act and Board regulations.
(3) Prohibited by the interactive gaming certificate- holder or interactive gaming operator from interactive gaming.
§ 811a.7. Mandatory interactive gaming system logging.
(a) An interactive gaming system must employ a mechanism capable of maintaining a separate copy of the information required to be logged under this chapter on a separate and independent logging device capable of being administered by an employee with no incompatible function. If the interactive gaming system can be configured so that any logged data is in a secure transaction file, a separate logging device is not required.
(b) An interactive gaming system must provide a mechanism for the Board to query and export, in a format required by the Board, all gaming system data.
(c) An interactive gaming system must electronically log the date and time any interactive gaming account is created or terminated (Account Creation Log).
(d) An interactive gaming system must maintain all information necessary to recreate player game play and account activity during each player session, including any identity or location verifications, for no less than 10 years.
(e) Unless otherwise authorized by the Board, when software is installed on or removed from an interactive gaming system, the action must be recorded in a secure electronic log (Software Installation/Removal Log), which must include all of the following:
(1) The date and time of the action.
(2) The identification of the software.
(3) The identity of the person performing the action.
(f) Unless otherwise authorized by the Board, when a change in the availability of game software is made on a gaming system, the change must be recorded in a secure electronic log (Game Availability Log), which must include all of the following:
(1) The date and time of the change.
(2) The identification of the software.
(3) The identity of the person performing the change.
(g) Unless otherwise exempted by the Board, an interactive gaming system must record all promotional offers (Promotions Log) issued through the system. The Promotions Log must provide the information necessary to audit compliance with the terms and conditions of current and previous offers.
(h) Results of all authentication attempts must be retained in an electronic log (Authentication Log) and accessible for 90 days.
(i) All adjustments to gaming system data made using stored procedures must be recorded in an electronic log (Adjustments Log), which lists all of the following:
(1) The date and time.
(2) The identification and user ID of user performing the action.
(3) A description of the event or action taken.
(4) The initial and ending values of any data altered as a part of the event or action performed.
§ 811a.8. Records/data retention requirements.
(a) For the purposes of this section, ''books, records and documents'' means any book, record or document pertaining to, prepared in or generated by the operation of the interactive gaming certificateholder or interactive gaming operator including all forms, reports, accounting records, ledgers, subsidiary records, computer generated data, internal audit records, correspondence and personnel records required to be generated and maintained under this part. This definition applies without regard to the medium through which the record is generated or maintained (for example, paper, magnetic media or encoded disk).
(b) Original books, records and documents pertaining to the operation of interactive gaming must be:
(1) Prepared and maintained in a complete, accurate and legible form. Electronic data must be stored in a format that ensures readability, regardless of whether the technology or software that created or maintained it has become obsolete.
(2) Retained in a secure location by the interactive gaming certificateholder or interactive gaming operator that is equipped with a fire suppression system or at another location approved under subsection (d).
(3) Made available for inspection by agents of the Board, the Department and the Pennsylvania State Police during all hours of operation.
(4) Organized and indexed in a manner to provide immediate accessibility to agents of the Board, the Department and the Pennsylvania State Police.
(5) Destroyed only after expiration of the minimum retention period specified in subsection (c), except that the Board may, upon the written request of an interactive gaming certificateholder or interactive gaming operator and for good cause shown, permit the destruction at an earlier date.
(c) Original books, records and documents shall be retained by an interactive gaming certificateholder or interactive gaming operator for a minimum of 5 years.
(d) An interactive gaming certificateholder or interactive gaming operator may request, in writing, that the Board's Executive Director approve an alternative location outside of this Commonwealth to store original books, records and documents. The request must include all of the following:
(1) A detailed description of the proposed location, including security and fire suppression systems.
(2) The procedures under which the Board, the Department and the Pennsylvania State Police will be able to gain access to the original books, records and documents retained at the location outside of this Commonwealth.
(e) An interactive gaming certificateholder or interactive gaming operator may request, in writing, that the Board's Executive Director approve a microfilm, microfiche or other suitable media system for the copying and storage of original books, records and documents. The request must include representations regarding all of the following:
(1) The processing, preservation and maintenance methods which will be employed to ensure that the books, records and documents are available in a format which makes them readily available for review and copying.
(2) The inspection and quality control methods which will be employed to ensure that microfilm, microfiche or other media when displayed on a reader/viewer or reproduced on paper exhibits a high degree of legibility and readability.
(3) The availability of a reader/printer for use by the Board, the Department and the Pennsylvania State Police at the location approved by the Board and the readiness with which the books, records or documents being stored on microfilm, microfiche or other media can be located, read and reproduced.
(4) The availability of a detailed index of all microfilmed, microfiched or other stored data maintained and arranged in a manner to permit the immediate location of any particular book, record or document.
(f) Nothing herein shall be construed as relieving an interactive gaming certificateholder or interactive gaming operator from meeting any obligation to prepare or maintain any book, record or document required by any other Federal, State or local governmental body, authority or agency.
§ 811a.9. Required reports; reconciliation.
(a) An interactive gaming system shall be designed to generate reports as specified by the Board that must include, at a minimum, all of the following:
(1) The report title.
(2) The version number of the current system software and report definition.
(3) The date or time period of activity, or description as of a point in time.
(4) The date and time the report was generated.
(5) Page numbering, indicating the current page and total number of pages.
(6) Subtotals and grand totals as required by the Department.
(7) A description of any filters applied to the data presented in the document.
(8) Column and row titles, if applicable.
(9) The name of the interactive gaming certificate- holder or interactive gaming operator.
(10) A reconciliation of all relevant data contained therein, if applicable.
(b) All required reports must be generated by the interactive gaming system, even if the period specified contains no data to be presented. The report generated must indicate all required information and contain an indication of ''No Activity'' or similar message if no data appears for the period specified.
(c) An interactive gaming system must provide a mechanism to export the data generated for any report to a format approved by the Board.
(d) An interactive gaming system must generate all of the following daily reports, at a minimum, for each gaming day to calculate the taxable revenue:
(1) A Player Account Summary Report, which must include transaction information for each player account and test account for all of the following categories:
(i) Beginning balance.
(ii) Total amount of deposits.
(iii) Total amount of noncashable bonuses deposited.
(iv) Total amount of noncashable bonuses wagered by game type (sports, slots and tables).
(v) Total amount of noncashable bonuses expired.
(vi) Total amount of transfers to games by game type (sports, slots and tables).
(vii) Total amount of transfers from games by game type (sports, slots and tables).
(viii) Total amount of withdrawals.
(ix) Total amount of funds on game at the beginning of the gaming day (the amount of pending wagers at the end of the prior gaming day).
(x) Total amount of funds on game at the end of the gaming day (the amount of pending wagers plus funds transferred to a game but not yet wagered).
(xi) Win or loss, calculated as the ending funds on games less the beginning funds on game.
(xii) Ending balance.
(xiii) Any other information that may be required by the Board.
(2) A Wagering Summary Report, which must include all of the following by authorized game and poker variation, as applicable:
(i) Total amounts wagered.
(ii) Total amounts won.
(iii) Total tournament entry or participation fees.
(iv) Rake or vigorish.
(v) Total amounts of guaranteed funds paid to players.
(vi) Total amounts due to or from an interactive gaming network.
(vii) Win or loss calculated as the net of the total amounts wagered and total amounts won plus tournament entry fees, rake or vigorish, guaranteed funds and amounts due to or from an interactive gaming network.
(viii) Any other information that may be required by the Board.
(3) A noncashable Promotional Account Balance Report, which must include the ending noncashable promotional balance in each player account.
(e) An interactive gaming network must generate the following daily reports for each participating interactive gaming certificateholder or interactive gaming operator, at a minimum, for each gaming day to reconcile the daily gross interactive gaming revenue:
(1) A System Player Account Summary Report, which must include all of the following transaction information for each player account:
(i) Player identification number.
(ii) Total amount of transfers to games.
(iii) Total amount of transfers from games.
(iv) Win or loss statistics.
(v) Total amount of rake.
(vi) Total amount of entry fees.
(2) A System Wagering Summary Report, which must include all of the following game activity by authorized game or poker variation:
(i) Total amounts wagered.
(ii) Total amounts won.
(iii) Total tournament entry or participation fees.
(iv) Rake or vigorish.
(v) Total amounts of guaranteed funds paid to players.
(vi) Win or loss statistics, calculated as the net of the total amounts wagered and total amounts won plus tournament entry fees, rake or vigorish, and guaranteed funds.
(f) An interactive gaming certificateholder or interactive gaming operator must utilize the Wagering Summary Report to calculate interactive gross gaming revenue on a daily basis for reporting purposes. In addition, the certificateholder or operator shall do all of the following:
(1) Prepare a Variance Report documenting the win/loss amounts from the Player Account Report and Wagering Summary Report.
(2) Calculate the variance between the two amounts.
(3) Document the reason for the variance.
(4) Report a manual adjustment to increase revenue by the amount of the variance whenever the total of the Player Account Summary Report is greater than the total of the Wagering Summary Report, unless the reason for the variance as documented above is sufficient to support a determination that revenue was properly reported.
(g) Instead of subsection (f), an interactive gaming certificateholder or interactive gaming operator may accumulate the daily Variance Report information on a monthly Variance Report in a manner described in the interactive gaming certificateholder's or interactive gaming operator's internal controls.
(h) An interactive gaming system must generate, on a daily basis commencing 2 years after the creation of the first interactive gaming account, a Dormant Account Report, which must list all player accounts including the Pending Wager Account Report that have not had activity for 2 years. The report must include all of the following:
(1) The player name and account number.
(2) The date of the last transaction.
(3) The account balance.
(i) Voids of completed wagering transactions may not occur without Board approval.
(j) An interactive gaming system must generate a Performance Report, which compares the theoretical return to player (RTP) to the actual RTP of each game offered by a gaming system. The report must also provide the total number of rounds of play for each game and shall be generated and reviewed monthly by the interactive gaming certificateholder or interactive gaming operator to evaluate the performance of all games offered to the public. The Performance Report must include the data required by this subsection from the first day interactive gaming was offered to the date of the report.
(k) An interactive gaming system must generate a Player Account Adjustments Report, which shall be reviewed on a daily basis by either the interactive gaming certificateholder or interactive gaming operator to evaluate the legitimacy of player account adjustments. If the daily review is performed by the interactive gaming operator, the interactive gaming certificateholder or interactive gaming operator shall conduct a weekly review of the Player Account Adjustment Reports. Unless otherwise authorized by the Board, the report must, at a minimum, include all of the following:
(1) The player's name.
(2) An account number.
(3) The date and time of the adjustment.
(4) The person who performed the adjustment.
(5) The reason for the adjustment.
(6) The amount of the adjustment.
(l) An interactive gaming system must generate a report on a weekly basis identifying potential compulsive and problem gamblers, including those players who self-report. The interactive gaming certificateholder or interactive gaming operator shall review the report and document any action taken.
(m) An interactive gaming system must be capable of generating a Pending Transaction Account Report, which must include and separately itemize all pending transactions for each player account, including funds on game and deposits and withdrawals not yet cleared.
(n) An interactive gaming certificateholder or interactive gaming operator shall develop internal controls for performing a daily reconciliation of gross interactive gaming revenue, including a daily reconciliation of the Player Account Summary Report to the Wagering Summary Report, a reconciliation of the Wagering Summary Report to each remote game servicer, a reconciliation of sports wagering system reports to the wagering Summary Report, and at least a quarterly calculation of the balance required to be maintained pursuant to § 811a.5 (relating to segregation of bank accounts and reserve requirements).
(i) Each report shall be accurate to reconcile and balance on a daily basis.
(ii) Variances shall be investigated and reported to the Board, which must include the amount, cause and remediation plan for corrective action.
[Continued on next Web Page]
No part of the information on this site may be reproduced for profit or sold for profit.This material has been drawn directly from the official Pennsylvania Bulletin full text database. Due to the limitations of HTML or differences in display capabilities of different browsers, this version may differ slightly from the official printed version.
