20:04:35:09Terms and conditions and privacy policies for accounts.

All terms and conditions and privacy policies for accounts must be included in the internal controls of the hub licensee, be readily accessible to the account holder before and after registration, and be noticed when materially updated. Terms and conditions and privacy policies for accounts must contain the following: (1) That no underage individuals are permitted to participate in wagering; (2) Specifications advising account holders to keep their authentication credentials secure; (3) Processes for dealing with lost authentication credentials, forced password changes, and password strength; (4) Conditions under which an account is declared inactive and the actions undertaken on the account once this declaration is made; (5) Actions that will be taken on the account holder's pending wagers placed prior to any exclusion or suspension, the return of all wagers, or settling all wagers, as appropriate; (6) Information about timeframes and limits regarding deposits to or withdrawals from the account; (7) That the advance deposit wagering licensee has the right to: (a) Refuse to establish an account for what it deems good and sufficient reason; (b) Refuse deposits to or withdrawals from accounts for what it deems good and sufficient reason; and (c) Unless there is a pending investigation or account holder dispute, suspend or close any account at any time pursuant to the terms and conditions between the licensee and the account holder; and (8) The licensee's personal identifying information protection policy with the following terms: (a) The information required to be collected; (b) The purpose and legal basis for collection; (c) The period in which the information is stored, or, if no period can be possibly set, the criteria used to set this; (d) The conditions allowing disclosure; (e) That measures are in place to prevent unauthorized or unnecessary disclosure; and (f) Any other privacy requirements specified by the commission through internal controls.

Source: 53 SDR 35, effective September 30, 2026.