Okla. Stat. tit. 3A, § 3A-277: Standards for cashless transaction systems

A. The following standards shall be met in connection with any

cashless transaction system:

1. All player account information must be stored on at least

two (2) separate nonvolatile media;

2. An audit file must be kept of all financial transactions

against the account. This file must be stored in at least two (2)

separate nonvolatile media, and be accessible for purposes of audit

and disputes resolution to authorized individuals. This file must

be available on-line for a minimum of thirty (30) days, after which

it must be available off-line for a minimum of one hundred eighty

(180) days;

3. Access controls must be in place to guarantee that

unauthorized individuals will not have access to account information

or history;

4. Passwords or personal identification numbers (PINs), if

used, must be protected from unauthorized access;

5. All means for communicating information within the system

shall conform to the standards set forth in this act;

6. Player accounts shall follow accounting procedures which are

designed to verify and protect the accurate recording of all player

transactions;

7. Any card or other tangible instrument issued to a player for

the purpose of using the cashless transaction system shall bear on

its face a control or inventory number unique to that instrument;

8. Encoded bearer instruments printed or magnetic may include

coupons and other items distributed or sold for game play,

promotional, advertising or other purposes, but may not include

cash. Such instruments must be in electronically readable form in

addition to having unique identification information printed on the

instrument face. The daily and monthly reporting must include with

respect to such instruments:

a. cash converted to game play credits,

b. outstanding unredeemed balance,

c. game play credits converted to cash,

d. game play credits used, and

e. game play credits won;

9. All customer accounts or instruments must have a redemption

period of at least fourteen (14) days; and

10. No ATM card, financial institution debit card or credit

card shall be utilized as part of any cashless transaction system.

B. Any “smart card” system which the licensee intends to

implement as part of the cashless transaction system shall be tested

by an independent testing laboratory approved by the Commission to

ensure the integrity of player funds. Any smart card must store on

the card or on the system using the card an audit trail of the last

ten (10) transactions involving the use of the card. Each

transaction record must include, at a minimum, the type of

transaction, the amount of the transaction, the date of the

transaction, the time of the transaction, and the identification of

the player terminal or cashier terminal or other points of cash

exchange where the transaction occurred. The minimum daily and

monthly reporting for smart card activity must include:

1. Total of cash transferred to smart cards;

2. Total of smart card amounts transferred to cash;

3. Total of smart card amounts transferred to game play

credits;

4. Total of game play credits transferred to smart card

amounts; and

5. Total unredeemed smart card balance.

C. Systems shall be permissible that allow player tracking,

maintenance tracking, and other gaming management or marketing

functions. These systems shall not interfere with, or in any way

affect, the outcome of any game being played. Systems shall be

permissible that allow progressive prize management with the

certification of the independent testing laboratory approved by the

Oklahoma Horse Racing Commission.