Ohio regulator proposes multi-factor authentication for online sports betting

The Ohio Casino Control Commission has sent a letter to gambling stakeholders informing them of a potential amendment to Rule 3775-16-03 of the Ohio Administrative Code to make multi-factor account verification mandatory for all sports bettors.

The proposal aims to protect the funds of sportsbook account holders across the state’s 20 licensed online operators.

Currently, operators are only required to offer multi-factor authentication to customers, but if the amendment went ahead, implementation of multi-factor authentication would become a stipulation of the state’s licensing agreement. 

The altered amendment would read: “Require patrons to protect access to funded sports gaming accounts with multi‐ factor authentication” as opposed to “provide patrons the option to protect access to funded sports gaming accounts with multi‐ factor authentication”.

The amendment would also allow operators to use a “similar authentication method” as long as it was approved by the regulator. 

The notice did not class these “similar authentication method[s]” or provide alternatives to multi-factor authentication.

Connecticut uses an authentication system which regulations in the state notes shall “utilize sufficient security to ensure patron access is appropriately limited to the account holder”.

New Jersey’s Division of Gaming Enforcement and the Pennsylvania Gaming Control Board both introduced multi-factor authentication in 2022.

Elsewhere, the Ohio Casino Control Commission is reviewing letters from Fanatics and FanDuel over a new proposal to restrict tying promos to non-gambling transactions. 

 The regulator is seeking to restrict the purveying of promos tethered to non-gambling transitions unless an operator can ensure the offer is not reaching any individual under the age of 21 or people who have signed up to the Ohio’s Voluntary Exclusion Program.