Administrative Code

Virginia Administrative Code
9/26/2021

Article 4. Electronic Pull-Tab Devices

11VAC15-40-300. Electronic pull-tab device general requirements.

A. Each electronic pull-tab device shall bear a seal approved by the commissioner and affixed by the department.

B. An electronic pull-tab device shall not be capable of being used for the purposes of engaging in any game prohibited by the department.

C. In addition to a video monitor or touch screen, each electronic pull-tab device may have one or more of the following: a bill acceptor, printer, and electromechanical buttons for activating the game and providing player input, including a means for the player to make selections and choices in games.

D. For each electronic pull-tab device, there shall be located anywhere within the distributed pull-tab system, nonvolatile memory or its equivalent. The memory shall be maintained in a secure location for the purpose of storing and preserving a set of critical data that has been error checked in accordance with the critical memory requirements of this regulation.

E. An electronic pull-tab device shall not have any switches, jumpers, wire posts, or other means of manipulation that could affect the operation or outcome of a game. The electronic pull-tab device may not have any functions or parameters adjustable through any separate video display or input codes except for the adjustment of features that are wholly cosmetic.

F. An electronic pull-tab device shall not have any of the following attributes: spinning or mechanical reels, pull handle, sounds or music solely intended to entice a player to play, flashing lights, tower light, top box, coin tray, ticket acceptance, hopper, coin acceptor, enhanced animation, cabinet or payglass artwork, or any other attribute identified by the department.

G. An electronic pull-tab device shall be robust enough to withstand forced illegal entry that would leave behind physical evidence of the attempted entry or such entry that causes an error code that is displayed and transmitted to the distributed pull-tab system. Any such entry attempt shall inhibit game play until cleared and shall not affect the subsequent play or any other play, prize, or aspect of the game.

H. Except as provided in subsection I of this section, the number of electronic pull-tab devices, other than those electronic pull-tab devices that are handheld, present at any premises at which charitable gaming is conducted shall be limited to 10. Except as provided in subsection I of this section the number of handheld electronic pull-tab devices present at any premises at which charitable gaming is conducted shall be limited to 50. The department shall determine whether an electronic pull-tab device is handheld.

I. The number of electronic pull-tab devices used to facilitate the play of electronic pull-tabs sold, played, and redeemed at any premises pursuant to § 18.2-340.26:1 of the Code of Virginia shall be limited to nine.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012; amended, Virginia Register Volume 34, Issue 12, eff. March 8, 2018.

11VAC15-40-310. Cabinet wiring.

A. Proof of UL or equivalent certification shall be required for all submitted electronic devices.

B. An electronic pull-tab device shall be designed so that power and data cables into and out of the electronic pull-tab device can be routed so that the cables are not accessible to the general public.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012.

11VAC15-40-320. Electronic pull-tab device identification.

An electronic pull-tab device shall have a permanently affixed identification badge that cannot be removed without leaving evidence of tampering. This badge shall be affixed to the exterior of the electronic pull-tab device and shall include the following information:

1. Manufacturer name;

2. A unique serial number;

3. The electronic pull-tab device model number;

4. The date of manufacture; and

5. Any other information required by the department.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012.

11VAC15-40-330. Doors; compartments.

A. If an electronic pull-tab device possesses an external door that allows access to the interior of the machine the following rules shall apply:

1. Doors and their associated hinges shall be capable of withstanding determined illegal efforts to gain access to the inside of the electronic pull-tab device and shall leave evidence of tampering if an illegal entry is made;

2. All external doors shall be locked and monitored by door access sensors that shall detect and report all external door openings by way of an audible alarm, on-screen display, or both;

3. The electronic pull-tab device shall cease play when any external door is opened;

4. It shall not be possible to disable a door open sensor when the machine's door is closed without leaving evidence of tampering;

5. The sensor system shall register a door as being open when the door is moved from its fully closed and locked position; and

6. Door open conditions shall be recorded in an electronic log that includes a date/time stamp.

B. Electronic pull-tab devices that contain control programs located within an accessible area shall have a separate internal locked logic compartment, that shall be keyed differently than the front door access lock. The logic compartment shall be a locked cabinet area with its own locked door, that houses critical electronic components that have the potential to significantly influence the operation of the electronic pull-tab device. There may be more than one such logic area in an electronic pull-tab device. Electronic component items that are required to be housed in one or more logic areas are:

1. CPUs and other electronic components involved in the operation and calculation or display of game play;

2. Communication controller electronics and components housing the communication program storage media or, the communication board for the on-line system may reside outside the electronic pull-tab device; and

3. Logic compartment door open conditions shall be recorded in a log that includes a date/time stamp.

C. Electronic pull-tab devices that do not contain a door shall have adequate security for any panels or entry points that allow access to the interior of the device.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012.

11VAC15-40-340. Memory clear.

A. Following the initiation of a memory reset procedure utilizing a certified reset method, the program shall execute a routine that initializes the entire contents of memory to the default state. For electronic pull-tab devices that allow for partial memory clears, the methodology in doing so must be accurate and the game application must validate the uncleared portions of memory. The electronic pull-tab device display after a memory reset shall not be the top award.

B. It shall not be possible to change a configuration setting that causes an alteration or obstruction to the electronic accounting meters without a memory clear.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012.

11VAC15-40-350. Critical memory.

A. Critical memory shall be used to store all data that is considered vital to the continued operation of the electronic pull-tab device. Critical memory storage shall be maintained by a methodology that enables errors to be identified and corrected in most circumstances. This methodology may involve signatures, checksums, partial checksums, multiple copies, timestamps, and/or use of validity codes. This includes, but is not limited to:

1. All electronic meters required in 11VAC15-40-410 E;

2. Current unused credits;

3. Electronic pull-tab device or game configuration data;

4. Recall of all wagers and other information necessary to fully reconstruct the game outcome associated with the last 10 plays;

5. Software state, which is the last state the electronic pull-tab device software was in before interruption; and

6. Error conditions that may have occurred on the electronic pull-tab device that may include:

a. Memory error or control program error;

b. Low memory battery, for batteries external to the memory itself or low power source;

c. Program error or authentication mismatch; and

d. Power reset.

B. Comprehensive checks of critical memory shall be made continually to test for possible corruption. In addition, all critical memory:

1. Shall have the ability to retain data for a minimum of 180 days after power is discontinued from the electronic pull-tab device. If the method used is an off-chip battery source, it shall recharge itself to its full potential in a maximum of 24 hours. The shelf life shall be at least five years. Memory that uses an off-chip back-up power source to retain its contents when the main power is switched off shall have a detection system that will provide a method for software to interpret and act upon a low battery condition;

2. Shall only be cleared by a department certified memory clear method; and

3. Shall result in an error if the control program detects an unrecoverable memory error.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012.

11VAC15-40-360. Program storage devices.

A. All program storage devices (writable/nonwritable), including Erasable Programmable Read Only Memory (EPROM), DVD, CD-ROM, compact flash, and any other type of program storage device shall be clearly marked with sufficient information to identify the software and revision level of the information stored in the devices.

B. Program storage devices shall meet the following requirements:

1. Program storage, including CD-ROM, shall meet the following rules:

a. The control program shall authenticate all critical files by employing a hashing algorithm that produces a "message digest" output of at least 128 bits at minimum, as certified by the recognized independent test laboratory and agreed upon by the department. Any message digest shall be stored on a read-only memory device within the electronic pull-tab device. Any message digest that resides on any other medium shall be encrypted, using a public/private key algorithm with a minimum of a 512 bit key, or an equivalent encryption algorithm with similar security certified by the independent test laboratory and agreed upon by the department.

b. The electronic pull-tab device shall authenticate all critical files against the stored message digests. In the event of a failed authentication, the electronic pull-tab device should immediately enter an error condition with the appropriate indication such as an audible signal, on-screen display, or both. This error shall require operator intervention to clear. The electronic pull-tab device shall display specific error information and shall not clear until the file authenticates properly and/or the electronic pull-tab device's memory is cleared, the game is restarted, and all files authenticate correctly.

2. CD-ROM specific based program storage shall:

a. Not be a rewriteable disk; and

b. The "write session" shall be closed to prevent any further writing to the storage device.

C. Electronic pull-tab devices where the control program is capable of being erased and reprogrammed without being removed from the electronic pull-tab device, or other equipment or related peripheral devices shall meet the following requirements:

1. Reprogrammable program storage shall only write to alterable storage media containing data, files, and programs that are not critical to the basic operation of the game.

2. Notwithstanding the foregoing, data may be written to media containing critical data, files, and programs provided that:

a. A log of all information that is added, deleted, and modified be stored on the media;

b. The control program verifies the validity of all data, files, and programs that reside on the media using the methods required herein;

c. The electronic pull-tab device's program contains appropriate security to prevent unauthorized modifications; and

d. The electronic pull-tab device's program does not allow game play while the media containing the critical data, files, and programs is being modified.

D. The control program shall ensure the integrity of all critical program components during the execution of said components and the first time the files are loaded for use even if only partially loaded. Space that is not critical to machine security (e.g., video or sound) is not required to be validated, although the department recommends a method be in place for the files to be tested for corruption. If any of the video or sound files contain payout amounts or other information needed by the player, the files are to be considered critical.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012.

11VAC15-40-370. Touch screens.

Any touch screen must meet the following rules:

1. A touch screen shall be accurate once calibrated;

2. A touch screen shall be able to be recalibrated; and

3. A touch screen shall have no hidden or undocumented buttons or touch points anywhere on the touch screen, except as provided for by the game rules that affect game play.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012.

11VAC15-40-380. Bill acceptors.

A. An electronic pull-tab device may have a mechanism that accepts U.S. currency and provides a method to enable the electronic pull-tab device software to interpret and act appropriately upon a valid or invalid input.

B. An acceptance device shall be electronically based and be configured to ensure that it only accept valid bills and rejects all others in a highly accurate manner.

C. A bill input system shall be constructed in a manner that protects against vandalism, abuse, or fraudulent activity. In addition, a bill acceptance device shall only register credits when:

1. The bill has passed the point where it is accepted and stacked; and

2. The bill acceptor has sent the "irrevocably stacked" message to the machine.

D. A bill acceptor shall communicate to the electronic pull-tab device using a bidirectional protocol.

E. A bill acceptor shall be designed to prevent the use of cheating methods such as stringing, the insertion of foreign objects, and any other manipulation that may be deemed as a cheating technique.

F. If a bill acceptor is designed to be factory set only, it shall not be possible to access or conduct maintenance or adjustments to that bill acceptor in the field, other than:

1. The selection of bills and their limits;

2. Changing of certified EPROMs or downloading of certified software;

3. The method for adjustment of the tolerance level for accepting bills of varying quality should not be accessible from the exterior of the electronic pull-tab device. Adjustments of the tolerance level should only be allowed with adequate levels of security in place. This can be accomplished through lock and key, physical switch settings, or other accepted methods approved on a case-by-case basis;

4. Maintenance, adjustment, and repair per approved factory procedures; and

5. Options that set the direction or orientation of bill acceptance.

G. An electronic pull-tab device equipped with a bill acceptor shall have the capability of detecting and displaying an error condition for the following events:

1. Stacker full (it is recommended that an explicit "stacker full" error message not be utilized since this may cause a security issue);

2. Bill jams;

3. Bill acceptor door open. If a bill acceptor door is a machine door, a door open signal is sufficient;

4. Stacker door open; and

5. Stacker removed.

H. An electronic pull-tab device equipped with a bill acceptor shall maintain sufficient electronic metering to be able to report the following:

1. Total monetary value of all bills accepted;

2. Total number of all bills accepted;

3. A breakdown of the bills accepted for each denomination; and

4. The value of the last five items accepted by the bill acceptor.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012.

11VAC15-40-390. Payment by voucher printers.

A. If the electronic pull-tab device has a printer that is used to issue payment to the player by issuing a printed voucher for any unused game plays and/or winnings, the electronic pull-tab device shall meet the following rules:

1. The printer shall be located in a secure area of the electronic pull-tab device, but shall not be located in the logic area or any cash storage area. The bill acceptor stacker or logic areas containing critical electronic components shall not be accessed when the printer paper is changed; and

2. Data printed on a voucher shall include the following information regarding each voucher printed:

a. Value of unused game plays and/or winnings in U.S. currency, in numerical form;

b. Time the voucher was printed;

c. Date the voucher was printed;

d. Location name or site identifier;

e. Serial number of electronic pull-tab device;

f. Unique validation number or barcode if used in conjunction with a validation system; and

g. Expiration date and time.

B. If the electronic pull-tab device is capable of printing a duplicate voucher, the duplicate voucher shall clearly state the word "DUPLICATE" on its face.

C. The printer shall use printer paper containing security features such as a watermark as approved by the department.

D. A printer shall have mechanisms to allow the electronic pull-tab device to interpret and act upon the following conditions that must disable the game, and produce an error condition that requires attendant intervention to resume play:

1. Out of paper;

2. Printer jam or failure; and

3. Printer disconnect. The electronic pull-tab device may detect this error condition when the game tries to print.

E. An electronic pull-tab device that uses a voucher printer shall maintain a minimum of the last 25 transactions in critical memory. All voucher transactions shall be logged with a date and time stamp.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012.

11VAC15-40-400. Payment by account.

A. Credit may be added to a player account via a cashier or point of sale station. Credit may also be added by any supporting electronic pull-tab device through credits won or bills.

B. Money may be removed from a player account either through downloading of credits to the electronic pull-tab device or by cashing out at a cashier's or point-of-sale station.

C. All monetary transactions between a supporting electronic pull-tab device and the distributed pull-tab system must be secured by means of a card insertion into a magnetic card reader and PIN entry or by other protected means.

Statutory Authority

§ 18.2-340.15 of the Code of Virginia.

Historical Notes

Derived from Virginia Register Volume 29, Issue 3, eff. November 7, 2012.

Website addresses provided in the Virginia Administrative Code to documents incorporated by reference are for the reader's convenience only, may not necessarily be active or current, and should not be relied upon. To ensure the information incorporated by reference is accurate, the reader is encouraged to use the source document described in the regulation.

As a service to the public, the Virginia Administrative Code is provided online by the Virginia General Assembly. We are unable to answer legal questions or respond to requests for legal advice, including application of law to specific fact. To understand and protect your legal rights, you should consult an attorney.