Section 99-01.3-16-09.6 - Manufacturing specifications - Electronic pull-tab device with operating systemAn electronic pull-tab device is part of an electronic pull-tab device operating system approved by the attorney general. An electronic pull-tab device operating system must be dedicated primarily to electronic accounting, reporting, and the presentation, randomization, and transmission of electronic pull tabs to the electronic pull-tab device. It also must be capable of generating the data necessary to provide the reports required within this section or otherwise specified by the attorney general. A manufacturer of an electronic pull-tab device with operating system must have the device and system tested by an approved independent testing laboratory as required in section 99-01.3-16-10. All game themes, sounds, and music also must be approved by the attorney general prior to being available for play on an electronic pull-tab device in North Dakota. An electronic pull-tab device and operating system and related equipment used in the conduct of electronic pull tabs according to 99-01.3-06.1 must meet these specifications:
1. All equipment used to facilitate the distribution, play, or redemption of electronic pull tabs must be physically located within the boundaries of the state of North Dakota. Electronic pull-tab device operating systems and all secondary components must be located on the licensed premises.2. At least seven calendar days before an electronic pull-tab device and operating system enter the state of North Dakota, a manufacturer shall report the following information to the attorney general in writing:a. Serial number of the electronic pull-tab device;b. How the electronic pull-tab device will be transported into the state and name and address of the common carrier or person that will be transporting the electronic pull-tab device;c. Gaming distributor and site where the pull-tab device will be placed;d. Identification number of software components;3. At least seven calendar days before removal of an electronic pull-tab device and operating system from the state of North Dakota, the manufacturer shall report the following information to the attorney general in writing: a. Serial number of the electronic pull-tab device;b. Date on which it was removed;c. Destination of the electronic pull-tab device; andd. Name of the person to whom the electronic pull-tab device is to be transferred to, including the person's street address, business and home telephone numbers, how the electronic pull-tab device is to be transported, and name and address of the common carrier or person transporting the electronic pull-tab device.4. A manufacturer's central computer system must include a central server located in North Dakota which is accessible to the attorney general. The attorney general shall have the ability to remotely verify the operation, compliance, and internal accounting systems of the electronic pull-tab operating system at any time. The attorney general shall have real time and complete access to all data and reports for all systems and devices.5. Manufacturers shall provide technical assistance and training in the service and repair of its electronic pull-tab devices and operating systems and associated equipment to distributors and organizations to ensure the continued, approved operation, and play of its devices and systems placed in the state. Manufacturers shall assist distributors according to subsection 26 of section 99-01.3-15-02 and a manufacturer representative shall sign and attest to the training provided on the required training document.6. An electronic pull-tab device site operating system must have a dedicated system site server. All electronic pull-tab games and game information must be stored on the site server. The site server must back up all game and accounting information automatically to the manufacturer's central server, at a minimum, immediately after the close of electronic pull-tab activity at a site each business day. All electronic pull-tab deals are considered in play when starting an electronic pull-tab game or when an electronic pull-tab deal is added to a game and all deals are considered in play until the game is closed.7. An electronic pull-tab device is only used as a means to communicate with a system site server and play electronic pull tabs. A device may not communicate game information directly to a manufacturer's central server. No electronic pull-tab game information may be stored on a device. All games and game information must be stored on the dedicated system site server. An electronic pull-tab device must allow a player to purchase an opportunity to play an electronic pull tab by insertion of United States paper currency or by insertion of the manufacturer's credit ticket voucher. A player wins if the player's electronic pull tab contains a combination of numbers, letters, or symbols that were designated in advance of the game as a winning combination. Each winning line or pattern on a winning pull tab constitutes an individual win. There may be multiple winning lines or patterns on each pull tab. Electronic pull-tab devices must only allow players to purchase and play electronic pull tabs. No other game may be played or represented that is a currently authorized North Dakota gaming activity. Authorized games for electronic pull-tab devices must conform to the following standards:a. The available games, master flare for each game, and rules of play must be displayed on the electronic pull-tab device's video screen. Rules of play must include all winning combinations. The display clearly must indicate prizes in United States currency amounts.b. All prize structure information for a deal must be accessible by a player, prior to purchase of an electronic pull-tab ticket.c. The electronic pull-tab device must have one or more buttons, electromechanical or touchscreen, to facilitate the following functions:(1) Viewing of the game "help" screens;(2) Viewing of the game rules, including the flare and prize structure information for a deal of a game, which includes the number of winners for each prize denomination;(3) Initiating game play;(5) One or more buttons designated to reveal the pull tab windows.d. Each electronic pull tab initially must be displayed so that the numbers, letters, or symbols on the pull tab are concealed. Each electronic pull-tab game must require the player to press a "play", "purchase", "open", or equivalent button to initiate the play of an electronic pull tab. A player may have the option of opening each individual line, row, or column of each electronic pull tab or may choose to "open all".e. An electronic pull-tab game may not have any bonus features or have or be part of a progressive system. No level of player skill may be involved. An extended play feature may be used in which a player may play without additional consideration. The extended play feature must not interfere with or in any way affect the outcome of any finite game being played.f. No more than twelve electronic pull-tab game titles may be selectable for play on any given electronic pull-tab device operating system. Only one of the game titles can be played on an electronic pull-tab device at any given time.g. Game themes may not contain offensive or obscene graphics, animations, or references. The attorney general shall determine what constitutes obscene or offensive graphics, animations, or references.h. An electronic pull-tab device may not be capable of displaying any enticing animation while in an idle state. A device not in play may not display flashing lights or illuminations, bells, whistles, or other sounds, solely intended to entice players to play. Only game information or licensed gaming organization promotion, or both, may be displayed while not in play. An electronic pull-tab device may use simple display elements or screen savers that promote the licensed charitable organization to prevent monitor damage.i. Following play on an electronic pull-tab device, the result must be clearly shown on the video display along with any prizes that may have been awarded. Prizes must be dispensed in the form of a credit ticket voucher or added to the credit balance meter.j. The results of the electronic pull tab must be shown to the player using a video display. No rolling, flashing, or spinning animations are permitted. No rotating reels marked into horizontal segments by varying symbols are permitted.k. The default electronic pull-tab device display, upon entering game play mode, may not be the top prize.8. An available balance may be collected from the electronic pull-tab device by the player by pressing the "cash out" button and receiving a credit ticket voucher at any time other than during: b. While in an audit mode;e. A credit meter or win meter incrementation, unless the entire amount is placed on the meters when the "cash out" button is pressed; or9. An electronic pull-tab device may not have hardware or software that determines the outcome of any electronic pull tab, produces its own outcome, or affects the order of electronic pull tabs as dispensed from the electronic pull-tab operating system. The game outcome must be determined by the electronic pull-tab operating system as outlined within these rules.10. An electronic pull-tab device may not be capable of displaying the number of electronic pull tabs that remain in the game or the number of winners or losers that have been awarded or still remain in the game while the game is still being played.11. Each electronic pull-tab deal must meet the following minimum requirements:a. Each deal must be made up of a fixed number of electronic pull tabs not to exceed a maximum of fifteen thousand and no less than two thousand electronic pull tabs;b. All electronic pull tabs in a particular deal must be of the same purchase price and may not exceed the maximum two dollar sales price per pull tab set forth by North Dakota Century Code section 53-06.1-08;c. The maximum prize amount awarded for a winning combination of numbers, letters, or symbols on each electronic pull tab may not exceed five hundred dollars as set forth for pull tabs by North Dakota Century Code section 53-06.1-08;d. A deal must have at least two top tier winning pull tabs;e. Each deal may not payout more than ninety percent of gross proceeds;f. Each deal must be assigned a unique serial number; andg. Each deal must be assigned a unique state gaming stamp number by the distributor prior to delivery to the organization site server.12. The following electronic pull-tab deal information must be available prior to the opening of a deal for distribution and must be maintained and be viewable both electronically and, if requested, by printed report:e. Prize structure identification;f. The state gaming stamp number assigned by the distributor for each deal;g. A unique serial number identifying each deal;h. The total number of electronic pull tabs in the deal;i. The purchase price per electronic pull tab assigned to the deal;j. Prize structure, including each prize value included in the deal and the number of each; andk. The payout percentage of the deal.13. At the beginning of a quarter, at least two, and no more than two electronic pull-tab deals must be downloaded and commingled on the site server for each game. The games deal must be identical, which includes game identification, deal version, manufacturer, game name, total number of electronic pull tabs, purchase price per electronic pull-tab ticket, and prize structure.14. For each game, when the unsold tickets of the original starting identical two deals reach two thousand pull-tab tickets remaining, at least one full deal, but no more than one additional identical deal of the same game, must be automatically downloaded onto the site server and commingled with the remaining two thousand tickets of that game. Each time the two thousand ticket threshold is reached, an additional deal must automatically be downloaded and commingled with the remaining electronic pull-tab tickets in the game continuously throughout the entire quarter.15. All games must be played by drawing from commingled finite deals. The site server must dispense, upon request from an electronic pull-tab device, an electronic pull tab. All finite games must be played without replacement. Once dispensed, a pull tab cannot be reused.16. No game may be closed during a quarter unless approved by the attorney general and all games must be closed at the same time within fourteen calendar days from the end of a quarter. Once closed, a game and its deals for a manufacturer cannot be reopened. Quarter beginning and end dates are: a. January first through March thirty-first;b. April first through June thirtieth;c. July first through September thirtieth; andd. October first through December thirty-first.17. Electronic pull-tab games or deals must be closed and archived at the end of each quarter. No closed electronic pull-tab game or ticket can be sold after the electronic pull-tab game is closed.18. One or more electronic accounting systems must be required to perform reporting and other functions in support of the electronic pull-tab operating system activities described in this section. These systems may communicate with the other computers described elsewhere in this document, utilizing the protocol standards agreed upon by the participating suppliers. The electronic accounting system must not interfere with the outcome of any gaming functions.19. An organization must have the capability to access an electronic pull-tab device operating system to generate and print all required system reports, close a set of electronic pull-tab games, and download a set of electronic pull-tab games without assistance from a manufacturer or distributor.20. An organization must have the capability to access an electronic pull-tab device operating system to select the individual games and cost per play they want to download and play each quarter without assistance from a manufacturer or distributor. A manufacturer or distributor may not require that a certain game and cost per play, or group of games and cost per play, or particular set of games and cost per play be required to be downloaded and played.21. If an electronic pull-tab device operating system is taken down and made nonoperational during an active session, the system must send a notification to all pull-tab devices and display the notification on the display screen. In addition, if credits remain on any device when a system is taken down and made nonoperational, the system must immediately have the devices issue credit ticket vouchers to the players that have credits remaining on a device's credit meter.22. An electronic pull-tab device operating system site server along with the manufacturer's central computer system's central server must account for and provide accounting information on all electronic pull-tab activity for three years from the end of the quarter in which the activity occurred. An electronic pull-tab device operating system site server along with the manufacturer's central computer system's central server must have the capabilities that allow an organization to generate and print the following records and reports:a. Interim period electronic pull-tab device activity report - accounts for electronic pull-tab activity for an interim period by device and total. An interim period is the accounting period for electronic pull-tab activity since the last time activity was accounted for.(1) The following information is required on the report: (c) Name of manufacturer;(d) Beginning and ending date and time of the interim period;(e) Date and time the report is generated by the organization. This must be the same as the ending date and time of the interim period. If included on the report, the print date and time may be different;(f) For each device, a separate section on the report that includes:[1] Device identification or serial number;[3] Total dollar value of credit ticket vouchers in;[4] Total dollar value of cash in plus total dollar value of credit ticket vouchers in;[5] Total dollar value of credit ticket vouchers issued out; and[6] For each game and cost per play;[a] Total dollar value of gross proceeds (plays);[b] Total dollar value of prizes awarded; and[c] Total dollar value of adjusted gross proceeds (gross proceeds less prizes awarded); and(g) A summary section, which includes: [1] Total cash in for all devices for the interim period;[2] Total dollar value of credit ticket vouchers in for all devices for the interim period;[3] Total dollar value of cash in plus total dollar value of credit ticket vouchers in for all devices for the interim period;[4] Total dollar value of credit ticket vouchers issued out by all devices for the interim period;[5] For each game and cost per play:[a] Total dollar value of gross proceeds (plays) for all devices;[b] Total dollar value of prizes awarded for all devices; and[c] Total dollar value of adjusted gross proceeds (gross proceeds less prizes awarded) for all devices; and[6] Totals for all games and cost per play:[a] Total dollar value of gross proceeds (plays) for all games and cost per play;[b] Total dollar value of prizes awarded for all games and cost per play; and[c] Total dollar value of adjusted gross proceeds (gross proceeds less prizes awarded) for all games and cost per play.(2) All devices must be accounted for on the interim period electronic pull-tab device activity report even if there was no activity or play on a device.(3) A manufacturer's electronic pull-tab device site operating system must be capable of identifying the beginning date and time of an interim period, which must be the ending date and time of the previous interim period electronic pull-tab device activity report that was generated for the site electronic pull-tab activity.(4) The site operating system may not allow for the overlap of reporting between two or more interim periods nor may the site operating system allow for unaccounted activity between interim periods. An interim period electronic pull-tab device activity report may not include electronic pull-tab activity from electronic pull-tab games that have been closed.(5) The site operating system must ensure that the game information, total gross proceeds (total dollar value of plays), total dollar value of prizes awarded, and total adjusted gross proceeds, for each game and cost per play, from all interim period electronic pull-tab device activity reports generated for a quarter of electronic pull-tab activity at a site, equals the game information for each game and cost per play accounted for on the electronic pull-tab closed game summary report, generated when all electronic pull-tab games are closed at a site at the end of each quarter.b. Deals in play report - accounts for all electronic deals of pull tabs currently in play for each game and cost per play at a site.(1) The following information is required on the report: (c) Name of manufacturer;(d) Date and time the report is generated by the organization; and(e) For each game and cost per play, a separate section on the report that includes: [3] Number of pull tabs per deal;[4] Ideal gross proceeds per deal;[5] Payout percentage per deal;[6] Total number of deals put into play for the game; and[7] For each deal put into play for the game:[a] State gaming stamp number of each deal;[b] Serial number of each deal; and[c] Date and time each deal was put into play.(2) A manufacturer's electronic pull-tab device site operating system must allow an organization to generate and print this report whenever the organization deems necessary during a quarter.(3) This report when generated must account for all electronic deals of pull tabs for a game and cost per play at a site from the time the game was first put into play through the date and time the report is generated by the organization. This includes deals that may have had all of its tickets sold before the report generation date and time. All electronic deals that have been downloaded onto the system for play for each game and cost per play must be accounted for on this report.(4) This report may not include any information as it relates to the number of pull tabs sold, number of unsold pull tabs, or prizes awarded for each deal or game.c. Monthly interim audit report - accounts for electronic pull-tab game information for each game and cost per play conducted at a site from the date and time the electronic pull-tab games were first put into play through the date and time that the report is generated.(1) The following information is required on the report:(c) Name of manufacturer;(d) Beginning and ending date and time of the interim audit period;(e) Date and time the report is generated by the organization;(f) Game name and cost per play;(g) For each game and cost per play: [1] Total dollar value of gross proceeds (plays);[2] Total dollar value of prizes awarded; and[3] Total dollar value of adjusted gross proceeds (gross proceeds less prizes awarded); and(h) Totals for all games and cost per play for gross proceeds, prizes, and adjusted gross proceeds.(2) A manufacturer must ensure that each time a monthly interim audit report is generated that its electronic pull-tab device site operating system is accounting for gross proceeds (the total dollar value of plays), prizes awarded, and adjusted gross proceeds for each electronic pull-tab game and cost per play on a site system from the time the games were first put into play at a site through the date and time the organization generates the report.(3) An organization is required to generate and print this report at the end of the first and second months of a quarter and retain the reports with all other accounting records and reports for the electronic pull-tab activity conducted at a site each quarter. An independent audit person of the organization is required to reconcile the totals for all games and cost per play information from the monthly interim audit report to the game summary report for all games conducted at the site at the end of the first and second months of a quarter. However, a manufacturer's electronic pull-tab device site operating system must allow an organization to generate and print this report whenever the organization deems necessary during a quarter.(4) The manufacturer's electronic pull-tab device site operating system must ensure that a monthly interim audit report only may be generated after an organization has completed an interim period visit to a site and has generated the interim period electronic pull-tab device activity report.(5) This report may not include any information as it relates to the number of unsold pull tabs remaining in the game or a breakdown of prizes awarded, including prize values and quantity of each.d. Electronic pull tab closed game summary report - accounts for the activity of each electronic pull-tab game and cost per play conducted on an electronic pull-tab device site operating system at the end of each quarter. (1) The following information is required on the report:(c) Name of manufacturer:(d) Date and time the report is generated by the organization;(e) For each game and cost per play, a separate section on the report that includes: [3] Number of pull tabs per deal;[4] Ideal gross proceeds per deal;[5] Ideal prizes per deal;[6] Ideal payout percentage per deal;[7] Total number of deals played in the game;[8] For each deal played in the game:[a] State gaming stamp number of each deal;[b] Serial number of each deal; and[c] Date and time each deal was put into play;[9] Ideal gross proceeds for game;[10] Total number of unsold pull tabs;[11] Dollar value of unsold pull tabs;[12] Total dollar value of gross proceeds (plays) for the game;[13] Total dollar value of prizes awarded for the game, including a breakdown of prizes by individual prize value and quantity of each awarded. For electronic pull tabs with multiple winners, each winning line or pattern must be accounted for separately by individual prize denomination;[14] Total dollar value of adjusted gross proceeds (gross proceeds less prizes awarded) for the game;[15] Final payout percentage for the game; and[16] Date and time the game was closed; and(f) Summary section, totals for all games and cost per play, that includes:[1] Total dollar value of gross proceeds (plays) for all games and cost per play;[2] Total dollar value of prizes awarded for all games and cost per play;[3] Total dollar value of adjusted gross proceeds (gross proceeds less prizes awarded) for all games and cost per play; and[4] Total number of deals played including a list of all gaming stamp numbers.(2) A manufacturer's electronic pull-tab device site operating system must ensure that the final interim period electronic pull-tab device activity report is generated for the site immediately before the site operating system allows the organization to close all electronic pull-tab games at the site and generate the electronic pull-tab closed game summary report.(3) The site operating system must ensure that the game information, total gross proceeds (total dollar value of plays), total dollar value of prizes awarded, and total adjusted gross proceeds, for each game and cost per play, from all interim period electronic pull-tab device activity reports generated for a quarter of electronic pull-tab activity at a site, equals the game information for each game and cost per play accounted for on the electronic pull-tab closed game summary report, generated when all electronic pull-tab games are closed at a site at the end of each quarter.(4) The electronic pull-tab device site operating system may not allow this report to be generated before all electronic pull-tab games have been closed at a site. Only upon the close of the games at the end of the quarter can the finite details of the games be made available. Generating this report before the games being closed must cause immediate and automatic termination of all games.23. All four electronic pull-tab system reports required by subdivisions a through d of subsection 22 of section 99-01.3-16-09.6 must be formatted as prescribed by the attorney general and approved by the office.24. A manufacturer must ensure that exact copies of all electronic pull-tab system reports required by North Dakota Administrative Code, which are generated by the organization, are readily and easily accessible for viewing and printing by the attorney general. The game information terminology (e.g. gross proceeds, prizes, adjusted gross proceeds) used on the required system generated reports for electronic pull-tab games must be identical to the terminology used by North Dakota Administrative Code for the game type. The reports must be retained by report type and include the date and time the report was generated and listed by the organization's name and then by site name. The reports must be retained for three years from the end of the quarter in which the electronic pull-tab activity occurred. In addition, the attorney general shall have the ability to generate and print, at any time, the deals in play report and monthly interim audit report for electronic pull-tab activity conducted at any site in the state of North Dakota.25. The only reports that an organization shall have access to and generate as it relates to the actual accounting and specific details of electronic pull-tab activity conducted at a site using an electronic pull-tab device operating system are the four reports prescribed by subdivision a through d of subsection 22 of section 99-01.3-16-09.6. No other additional reports that a manufacturer may have developed, which detail the actual accounting information and specific details relating to electronic pull-tab activity conducted at a site using an electronic pull-tab device operating system may be accessible to an organization while the electronic pull-tab games are actively in play.26. An organization is responsible for generating all required electronic pull-tab system reports and the closing of all electronic pull-tab games at a site. The manufacturer may not complete these functions for the organization.27. A manufacturer, at the request of an organization, distributor, or for any reason, may not change data on an electronic pull-tab device site operating system that affects the reporting and accounting of electronic pull-tab activity. A manufacturer must immediately notify the attorney general if the manufacturer identifies a problem with an electronic pull-tab device site operating system that relates to the collection, storing, or reporting of electronic pull-tab activity at a site.28. A manufacturer must ensure that the attorney general has access to an electronic pull-tab activity report that includes game and accounting information for all sites that conduct electronic pull-tab activity in the state of North Dakota. The attorney general must have the capabilities to generate and print the report for any date range, for any organization and site, and for all sites in total. The following information is required to be included on the report: b. Total gross proceeds (plays);d. Total adjusted gross proceeds;e. Payout percentage; andf. Total dollar value of credit ticket vouchers issued.29. An organization's electronic pull-tab device operating system must be programmed for hours of operation based on when alcoholic beverages may be dispensed according to applicable regulations of the state, county, or city.30. Electronic pull-tab devices must be a stand-alone cabinet style device. No device may be a hand-held portable device or affixed to a bar, counter, or table top. Electronic pull-tab devices must conform to the following minimum standards:a. An electronic pull-tab device must be labeled clearly so as to inform the public that no one under twenty-one years of age is allowed to play;b. No more than ten devices may be installed at a site;c. An electronic pull-tab device must only be used to play electronic pull tabs. No other game type may be played or be simulated on the device and no level of skill must be involved;d. An electronic pull-tab device may not be part of a progressive system or employ any other features, such as bonus plays, promotions, or other gaming management or marketing functions. An extended play feature may be used in which a player may play without additional consideration. An extended play feature must not interfere with or in any way affect the outcome of any finite game being played. If an extended play feature is used, a notification must be provided to the player explaining that an extended play feature is used on the game and that "Extended play features prolong the play of an electronic pull-tab ticket but do not award a prize in addition to the predetermined prize for that ticket";e. In addition to a video or touchscreen, each electronic pull-tab device must include a currency acceptor and validator, printer, and buttons for activating the game and providing player input, including a means for the player making selections and choices in games;f. Each electronic pull-tab device must have a nonvolatile backup memory or its equivalent, which must be maintained in a secure compartment on each electronic pull-tab device for the purpose of storing and preserving a redundant set of critical data which has been error-checked in accordance with the critical memory requirements of this regulation and which data must include, at a minimum, the following information:(1) Electronic meters as required by subsection 45;(2) Recall of all ticket purchases and electronic ticket numbers and serial numbers associated with the last ten plays; and(3) Error conditions that may have occurred on the electronic pull-tab device which include: (a) Nonvolatile memory error control program error;(b) Low nonvolatile memory battery, for batteries external to the nonvolatile memory itself, or low power source;(c) Program error or authentication mismatch; andg. An on/off switch that controls the electrical current that supplies power to the electronic pull-tab device, which must be located in a secure place;h. An electronic pull-tab operating system must support a mechanism to manually disable play on electronic pull-tab devices. Additionally, a mechanism to disable or enable each electronic pull-tab device must be made available to appropriate individuals to disable play during nonbusiness hours or as otherwise required;i. An electronic pull-tab device may not have any spinning or mechanical reels, pull handle, sounds or music solely intended to enticing a player to play, flashing lights, tower light, coin tray, hopper, coin acceptor, enhanced animation, cabinet or pay glass artwork, or any other attribute identified by the attorney general; andj. All hardware switches and jumpers must be fully documented for evaluation by the test laboratory. Hardware switches, jumpers, and system configurations that may alter the jurisdictional-specific configuration settings, prize structure, game denomination, or payout percentages must meet configuration settings specified in subdivision e of subsection 12 and must be housed within a logic compartment of the electronic pull-tab device. This includes top prize changes, selectable settings, or any other option that would affect payout percentage.31. An electronic pull-tab device must be robust enough to withstand forced entry that would leave behind physical evidence of the attempted entry, or such entry causes an error code that is displayed and transmitted to the central computer system, and which inhibits game play until cleared, and which does not affect the subsequent play or any other play, prize, or aspect of the game.32. An electronic pull-tab device must be designed so that power and data cables into and out of the electronic pull-tab device can be routed so that they are not accessible to the general public. Security related wires and cables that are routed into a logic compartment must be securely fastened within the interior of the device.33. Proof of UL or equivalent certification must be required for all submitted electronic pull-tab devices.34. An electronic pull-tab device must have an identification tag affixed to the exterior of the device by the manufacturer, which is not removable without leaving evidence of tampering, and this tag must include the following information: b. A unique serial number;c. The electronic pull-tab device model number; andd. The date manufactured.35. An electronic pull-tab device may not be adversely affected, other than resets, by surges or dips of greater than twenty percent of the supply voltage.36. An electronic pull-tab device must have a locked external front door in which the interior of the terminal must not be readily accessible when such door is in the closed, locked position. The following rules apply:a. Doors must be manufactured of materials that are suitable for allowing only legitimate access to the inside of the cabinet and must leave evidence of tampering if such an entry is made;b. All external doors must be locked and monitored by door access sensors, which must detect and report all external door openings to the electronic pull-tab device and trigger an audible alarm and on-screen display;c. The electronic pull-tab device must cease play when any external door is opened;d. It must not be possible to insert a device into the electronic pull-tab device which will disable a door open sensor when the electronic pull-tab device's door is closed, without leaving evidence of tampering;e. The sensor system must register a door as being open when the door is moved from its fully closed and locked position, provided power is supplied to the terminal; andf. Door open conditions must be recorded in an electronic log that includes a date and time stamp.37. Electronic pull-tab devices that contain control programs located within an accessible area must have a separate internal locked logic compartment which must be keyed differently than the front door access lock. The logic compartment must be a locked cabinet area with its own locked door, which houses critical electronic components that have the potential to significantly influence the operation of the electronic pull-tab device. There may be more than one such logic area in an electronic pull-tab device. The logic door must be monitored. Electronic components that are required to be housed in one or more logic areas are: a. Central processing units and any program storage device that contains software that may affect the integrity of gaming, including the game accounting, system communication, and peripheral firmware devices involved in, or which significantly influence, the operation and calculation of game play, game display, game result determination, or game accounting, revenue, or security;b. The nonvolatile memory backup device, if applicable, must be kept within a locked logic area; andc. Logic compartment door open conditions must be recorded in a log that includes a date and time stamp.38. All electronic pull-tab devices must accept United States paper currency or a credit ticket voucher only through a currency validator. All currency validators must be able to detect the entry of valid currency or credit ticket vouchers and provide a method to enable the electronic pull-tab device software to interpret and act appropriately upon a valid or invalid input. The currency validator must be electronically based and be configured to ensure that they only accept valid currencies of legal tender or valid credit ticket vouchers and must reject all other items. Rejected currencies or rejected credit ticket vouchers should be returned to the player. The currency validator must be constructed in a manner that protects against vandalism, abuse, or fraudulent activity. In addition a currency validator must meet the following rules: a. Each valid currency or valid credit ticket voucher must register the actual monetary value received for the denomination or credit ticket voucher being used on the player's credit meter;b. Credits must only be registered when: (1) The currency or valid credit ticket voucher has passed the point where it is accepted and stacked; and(2) The validator has sent the "irrevocably stacked" message to the electronic pull-tab device;c. Each currency validator must be designed to prevent the use of cheating methods, such as stringing, the insertion of foreign objects, and any other manipulation that may be deemed as a cheating technique. A method for detection of counterfeit currencies must be implemented;d. Acceptance of any currencies or valid credit ticket voucher for crediting to the credit meter must only be possible when the electronic pull-tab device is enabled for play. Other states, such as error conditions, including door opens, audit mode, and game play, must cause the disabling of the currency validator system;e. Each electronic pull-tab device and currency validator must have the capability of detecting and displaying the following error conditions, and must cause the electronic pull-tab device and currency validator to lock up and require authorized intervention to clear: (2) Currency or credit ticket voucher jams;(5) Any currency validator malfunction not specified above;f. All currency validators must communicate to the electronic pull-tab device using a bidirectional protocol;g. If a currency validator for an electronic pull-tab device is designed to be factory set only, it must not be possible to access or conduct maintenance or adjustments to those currency validators in the field, other than:(1) The selection of currencies;(2) Changing of certified control program media or downloading of certified software;(3) Adjustment of the currency validator for the tolerance level for accepting currencies of varying quality should not be allowed externally to the electronic pull-tab device;(4) Maintenance, adjustment, and repair per approved factory procedures; or(5) Options that set the direction or orientation of currency acceptance.h. The electronic pull-tab device must maintain sufficient electronic metering to be able to display the following:(1) Total monetary value of all currencies accepted;(2) Total number of all currencies accepted; and(3) A breakdown of the currencies accepted and the number of currencies accepted for each currency denomination;i. The information in subdivision h must be retained in the electronic pull-tab device memory and display the above required information of the last five currencies accepted by the currency validator. The currency validator recall log may be combined or maintained separately by currency type. If combined, the type of currency accepted must be recorded with the respective time and date stamp;j. Each currency validator must have a secure stacker and all accepted currencies must be deposited into the secure stacker. The secure stacker and its receptacle are to be attached to the electronic pull-tab device in such a manner so that they cannot be easily removed by physical force and must meet the following rules: (1) The currency validator device must have the ability to detect a stacker full condition; and(2) There must be a separate keyed lock to access the stacker area. This keyed lock must be separate from the main door; andk. A currency validator must be located in a locked area of the terminal but not in the logic area. Only the currency insertion area will be accessible by the player.39. All electronic pull-tab devices must have a printer to issue the player a printed credit ticket voucher for any unused game plays and winnings or both. The printer must print on a voucher or other ticket stock meeting the criteria outlined in this section. The electronic pull-tab device must support the transmission of voucher out data to the electronic pull-tab system that records the following information regarding each credit ticket voucher printed: a. Value of cash out which may include remaining credits, unused game plays, or winnings, or any combination, in United States currency amounts in numerical form;b. Time of day the voucher was printed in twenty-four hour format showing hours and minutes;c. Date the voucher was printed, including the day, month, and year;d. The name of the organization and site name;e. Serial number of the electronic pull-tab device which printed the voucher;f. Validation number which can be used to uniquely identify each voucher issued;g. The phrase that the credit ticket voucher must be redeemed on the same business day; andh. If the electronic pull-tab device is capable of printing a duplicate voucher, the duplicate voucher must clearly state the word "DUPLICATE" or similar approved language on its face.40. To further meet the requirements of subdivisions a through h of subsection 27, the electronic pull-tab device must have the ability to retain a log of the last twenty-five voucher-out events. The voucher-out log must contain sufficient information to reconstruct the voucher-out event in order to resolve potential player disputes.41. A printer must be located in a locked area of the electronic pull-tab device but may not be housed within the logic area. The printer may be locked in the currency validator area provided the validator has a secure, separately keyed lock securing the access to its stacker.42. A printer must have mechanisms to allow control program software to interpret and place the electronic pull-tab device inoperable upon the following conditions:b. Printer jam, failure; and43. The printer must use printer paper containing security features, such as a watermark as approved by the attorney general.44. Video monitors and or touchscreens must meet the following rules:a. Touchscreens must be accurate once calibrated and must maintain that accuracy for at least the manufacturer's recommended maintenance period;b. A touchscreen should be able to be recalibrated without access to the electronic pull-tab device cabinet other than opening the main door; andc. There may not be any hidden or undocumented buttons or touch points anywhere on the touchscreen which affect game play or which impact the outcome of the game.45. The credit meter must be maintained in cash value and must at all times indicate all cash available for the player to purchase tickets or cash out with the exception of when the player is viewing an informational screen, such as a menu or help screen item. This should be displayed to the player unless a tilt condition or malfunction exists.a. The dollar value of every prize at the end of a play must be added to the player's credit meter, unless a winning prize amount is immediately dispensed in the form of a credit ticket voucher to the player.b. There must be a collect meter, which shows the amount of cash collected by the player upon a cash out. This should be displayed to the player unless a tilt condition or malfunction exists. The amount of cash collected must be subtracted from the player's credit meter and added to the collect meter.c. The software meter information must only be accessible by an authorized person and must have the ability to be displayed on demand using a secure means.d. Electronic accounting meters must be at least ten digits in length. These meters must be maintained in credit units equal to the dollars and cents. Eight digits must be used for the dollar amount and two digits used for the cents amount. The meter must roll over to zero upon the next occurrence, and any time the meter exceeds ten digits and after 9,999,999,999 has been reached or any other value that is logical. Occurrence meters must be at least eight digits in length; however, are not required to automatically roll over. Meters must be labeled so they can be clearly understood in accordance with their function. All electronic pull-tab devices must be equipped with a device, mechanism, or method for retaining the value of all meter information specified in these rules which must be preserved in the event of power loss to the device. The required electronic meters are as follows:(2) Total credit ticket vouchers in;(4) Total cash, prizes won;(5) Total cash removed from the electronic pull-tab device;(6) Total count of electronic pull tabs played; and(7) Total count of electronic pull tabs won.e. In addition to the one set of master electronic accounting meters required above, each individual game available for play must have the prize structure meters "credits played" and "prizes won" in dollars and cents.46. An electronic pull-tab device may not have software that determines the outcome of any electronic pull-tab game. All application software must be owned or licensed by the manufacturer. All game outcomes are determined at the time of deal creation by the electronic pull-tab operating system software as outlined within this section of the administrative rules. a. Electronic pull-tab game software must be developed by the manufacturer if the manufacturer designs the electronic pull-tab system, database, user interface, the program architecture, and associated software.b. Any application software to be used by the manufacturer must be owned wholly or properly licensed from an application software provider and evidence of the license must be provided to the attorney general.c. The electronic pull-tab system manufacturer must provide documentation establishing ownership of the intellectual property rights to the entire game application software and system to the attorney general.47. The electronic pull-tab operating system must be dedicated primarily to functions related to the creation of electronic pull tabs and their creation, randomization, storage, and transmittal to the electronic pull-tab devices. It also must be capable of generating the data necessary to provide the reports required within this section. The operating system must be operationally independent from the electronic pull-tab device. The electronic pull-tab operating system, logic components, and site server must be in a locked, secure enclosure with key controls in place.48. The electronic pull-tab operating system must provide a secure physical and electronic means, for securing the electronic deals against alteration, tampering, or unauthorized access. The electronic pull-tab operating system must provide a means for terminating the electronic pull-tab game if unopened pull-tab information has been accessed or at the discretion of the attorney general.49. Progressives, cashless gaming, bonus plays, promotions, or other gaming management or marketing functions are not allowed. An extended play feature may be used if there is no additional consideration required from the player and the features do not alter the predetermined prize to be awarded for the pull-tab ticket. No player skill may be required with the extended play feature.50. As used in this section, unless the context requires a different meaning:a. "Card position" means the first electronic pull tab dealt, second electronic pull tab dealt in sequential order.b. "Number position" means the first number drawn in sequential order.51. Any random number generation used in connection with the central computer system must be by use of a microprocessor and random number generation program that meets the following random selection tests:a. Chi-square analysis. Each card, symbol, number, or position which is wholly or partially determinative of the outcome of the game satisfies the ninety-nine percent confidence limit using the standard chi-square analysis.b. Runs test. Each card, symbol, number, or position does not, as a significant statistic, produce predictable patterns of game elements or occurrences. Each card symbol, number, or position will be considered random if it meets the ninety-nine percent confidence level with regard to the "runs test" or any generally accepted pattern testing statistic.c. Correlation analysis. Each card, symbol, number, or position is independently chosen without regard to any other card, symbol, number, or position drawn within that game play. Each card, symbol, number, or position is considered random if it meets the ninety-nine percent confidence level using standard correlation analysis.d. Serial correlation analysis. Each card, symbol, number, or position is independently chosen without reference to the same card, number, or position in the previous game. Each card, number, or position is considered random if it meets the ninety-nine percent confidence level using standard serial correlation analysis.52. The central computer system may not permit the alteration of any accounting or significant event log information that was properly communicated from the electronic pull-tab operating system site server without supervised access controls. If financial data is changed, an automated audit log must be capable of being produced to document:b. Data element value prior to alteration;c. Data element value after alteration;d. Time and date of alteration; ande. Personnel that performed alteration (user login).53. The electronic pull-tab operating system must have a medium for securely storing electronic pull-tab deals on the site server which must be mirrored in real time by a backup medium. The manufacturer's central computer system server also must provide a means for storing duplicates of the electronic deals, already transmitted to the electronic pull-tab operating system site server, so as to reflect, on an ongoing basis, changes in the transmitted electronic deals as they occur.54. All storage must be through an error checking, nonvolatile physical medium, or an equivalent architectural implementation, so if the primary storage medium fails, the functions of the central computer system and the process of auditing those functions can continue with no critical data loss.55. The database must be stored on redundant media so that no single failure of any portion of the system would cause the loss or corruption of data.56. In the event of a catastrophic failure when the central computer system cannot be restarted in any other way, it must be possible to reload the central computer system from the last viable backup point and fully recover the contents of that backup, recommended to consist of at least the following information: b. Accounting information;c. Auditing information; andd. Specific site information, such as employee files with access levels.57. Connections between all components of the central computer system only must be through the use of secure communication protocols that are designed to prevent unauthorized access or tampering, employing advanced encryption standards or equivalent encryption with changeable seeds or algorithms. More specifically, secure connections and encryption must be utilized between the interface component and the system. 58. All data communication must incorporate an error detection and correction scheme to ensure the data is transmitted and received accurately.59. The system must be capable of detection and displaying certain conditions. These conditions must be recorded on an error log that may be displayed or printed on demand and must archive the conditions for a minimum of ninety days. The conditions include: a. Power reset or failure of an electronic pull-tab device or any component of the online data system; andb. Communication loss between an electronic pull-tab device and any component of the online data system.60. A firewall or equivalent hardware device configured to block all inbound and outbound traffic that has not been expressly permitted and is not required for continued use of the electronic pull-tab operating system must exist between the electronic pull-tab operating system and any external point of access.61. The minimum width for encryption keys is one hundred twelve bits for symmetric algorithms and one thousand twenty-four bits for public keys.a. There must be a secure method implemented for changing the current encryption key set. It is not acceptable to only use the current key set to "encrypt" the next set.b. There must be a secure method in place for the storage of any encryption keys. Encryption keys must not be stored without being encrypted themselves.62. The following significant events, if applicable, must be collected from the electronic pull-tab device and communicated to the central computer system for storage and a report of the occurrence of the significant event must be made available upon request: a. Power resets or power failure;b. Communication loss between an electronic pull-tab device and any component of the electronic pull-tab site operating system;d. Currency validator errors; e. Printer errors; (1) Printer empty or paper low; and(2) Printer disconnect or failure;f. Corruption of the electronic pull-tab device RAM or program storage device; andg. Any other significant events as defined by the protocol employed by the electronic pull-tab site operating system.63. The electronic pull-tab device operating system must not permit the alteration of any accounting or event log information that was properly communicated from the electronic pull-tab device to the dedicated site server unless documented, secure access controls are provided.64. The operating system of the electronic pull-tab system must provide comprehensive password security or other secure means of ensuring data integrity and enforcing user permissions for all system components through the following means:a. All programs and data files must be accessible only via the entry of a password that will be known only to authorized personnel;b. The electronic pull-tab operating system must have multiple security access levels to control and restrict different classes;c. The electronic pull-tab operating system access accounts must be unique when assigned to the authorized personnel and shared accounts amongst authorized personnel must not be allowed;d. The storage of passwords and personal identification numbers must be in an encrypted, nonreversible form; ande. A program or report must be available which lists all registered users on the electronic pull-tab operating system, including their privilege level. This report must include all user accounts that have access to system configurations, data, or other sensitive areas.65. All components of an electronic pull-tab operating system that allows access to users, other than end-users for game play, must have a password signon with two-level codes comprising the personal identification code and a personal password: a. The personal identification code must have a length of at least six ASCII characters; andb. The personal password must have a minimum length of six alphanumeric characters, which should include at least one nonalphabetic character.66. An electronic pull-tab operating system must have the capability to control potential data corruption that can be created by multiple simultaneous log on by system management personnel. a. An electronic pull-tab operating system must specify which of the access levels allow for multiple simultaneous sign on by different users and which of the access levels do not allow for multiple sign on, and if multiple sign on are possible, what restrictions, if any, exist; orb. If an electronic pull-tab operating system does not provide adequate control, a comprehensive procedural control document must be drafted for the attorney general's review and approval.67. Where the site operating system or components are linked with one another in a local network for function sharing or other purposes, communication protocols must be used which ensure erroneous data or signals will not adversely affect the operations of any such system or components.68. Dedicated and protected network connections prohibiting unauthorized access, may allow two or more central computer systems to share information. Deal details and other information prohibited from being viewed, as outlined in other sections of these rules, must not be available or transmitted between the connected systems or facilities.69. The central computer system may be used to record the data used to verify game play and to configure and perform security checks on electronic pull-tab devices provided such functions do not affect the security, integrity, or outcome of such games.70. Central computer system software components and modules must be verifiable by a secure means at the system level denoting program identification and version. The central computer system must have the ability to allow for an independent integrity check of the components and modules from an outside source and is required for all control programs that may affect the integrity of the central computer system. This must be accomplished by being authenticated by a third-party device, which may be embedded within the central computer system software or having an interface port for a third-party device to authenticate the media. This integrity check will provide a means for field verification of the central computer system components/modules to identify and validate the programs and files. The test laboratory, prior to system approval, must approve the integrity check method.71. Following the initiation of an nonvolatile memory reset procedure, the game program must execute a routine, which initializes all bits in critical nonvolatile memory to the default state. All memory locations intended to be cleared as per the nonvolatile memory clear process must be fully reset in all cases. For electronic pull-tab devices that allow for partial nonvolatile memory clears, the methodology in doing so must be accurate.72. The default game display immediately after a nonvolatile memory reset must not be the advertised top prize on any selectable line. The default game display, upon entering game play mode, must also not be the advertised top prize.73. It must not be possible to change a configuration setting that causes an obstruction to the electronic accounting meters without a nonvolatile memory clear. Notwithstanding, a change to the denomination must be performed by a secure means, which includes access to the locked logic compartment or other secure method provided that the method can be controlled by the attorney general.74. Critical memory is used to store all data that is considered vital to the continued operation of the electronic pull-tab device. This includes:a. All electronic meters required in subsection 45, including last currency data and power up and door open metering;c. Electronic pull-tab device game configuration data;d. Information pertaining to the last ten plays with the play outcome;f. Any prize structure configuration information residing in memory; andg. A log of the last one hundred significant events.75. Critical memory storage must be maintained by a methodology that enables errors to be identified. This methodology may involve signatures, checksums, partial checksums, multiple copies, timestamps, or effective use of validity codes, or any combination.76. Comprehensive checks of critical memory must be made following game initiation but prior to display of game outcome to the player. Critical memory must be continuously monitored for corruption. The methodology must detect failures with an extremely high level of accuracy.77. An unrecoverable corruption of critical memory must result in an error. The memory error should not be cleared automatically and should result in a tilt condition, which facilitates the identification of the error and causes the electronic pull-tab device to cease further function. The critical memory error should also cause any communication external to the electronic pull-tab device to immediately cease. An unrecoverable critical memory error must require a full nonvolatile memory clear performed by a licensed distributor.78. Nonvolatile memory space that is not critical to the security of the electronic pull-tab device is not required to be validated.79. Program storage device means the media or an electronic device that contains the critical control program components. Device types include EPROMs, compact flash cards, optical disks, hard drives, solid state drives, USB drives, etc. All program storage devices must:a. Be housed within a fully enclosed and locked logic compartment;b. Be clearly marked with sufficient information to identify the software and revision level of the information stored in the device. In the case of media types on which multiple programs may reside it is acceptable to display this information via the attendant menu;c. Validate themselves during each processor reset;d. Validate themselves the first time they are used; ande. CD-ROM, DVD, and other optical disk-based program storage must:(1) Not be a rewritable disk; and(2) The "session" must be closed to prevent any further writing.80. Electronic pull-tab devices that have control programs residing in one or more PROMs must employ a mechanism to verify control programs and data. The mechanism must use a cyclic redundancy check of at least sixteen bits.81. Non-EPROM program storage must meet the following rules: a. The software must provide a mechanism for the detection of unauthorized and corrupt software elements, upon any access, and subsequently prevent the execution or usage of those elements by the electronic pull-tab device. The mechanism must employ a hashing algorithm which produces a message digest output of at least one hundred twenty-eight bits;b. In the event of a failed authentication, after the electronic pull-tab device has been powered up, the terminal immediately should enter an error condition and display an appropriate error. This error must require operator intervention to clear and must not clear until the data authenticates properly, following the operator intervention or the media is replaced or corrected, and the electronic pull-tab device's memory is cleared.82. Alterable media must meet the following and additional rules:a. Employ a mechanism that tests unused or unallocated areas of the alterable media or unintended programs or data and tests the structure of the media for integrity. The mechanism must prevent further play of the electronic pull-tab device if unexpected data or structural inconsistencies are found;b. Employ a mechanism for keeping a record any time a control program component is added, removed, or altered on any alterable media. The record must contain a minimum of the last ten modifications to the media and each record must contain that date and time of the action, identification of the component that affected the reason for the modification, and any pertinent validation information.83. Program storage devices that do not have the ability to be modified while installed in the electronic pull-tab device during normal operation must be marked clearly with sufficient information to identify the software and revision level of the information stored in the devices.N.D. Admin Code 99-01.3-16-09.6
Adopted by Administrative Rules Supplement 369, July 2018, effective 7/1/2018.Amended by Administrative Rules Supplement 2022-387, January 2023, effective 1/1/2023.General Authority: NDCC 53-06.1-01.1
Law Implemented: NDCC 53-06.1-01.1