Article 4. Electronic Gaming Devices
11VAC20-20-330. Electronic gaming device general requirements.
A. Each electronic gaming device shall bear a tamper evident seal and individual serial number affixed by the department.
B. An electronic gaming device shall only be used for electronic gaming.
C. In addition to a video monitor or touch screen, each electronic gaming device may have one or more of the following: a bill acceptor, printer, and electromechanical buttons for activating the game and providing player input, including a means for the player to make selections and choices in games.
D. For each electronic gaming device, there shall be located anywhere within the distributed pull-tab system, nonvolatile memory or its equivalent. The memory shall be maintained in a secure location for the purpose of storing and preserving a set of critical data that has been error checked in accordance with the critical memory requirements of this chapter.
E. An electronic gaming device shall not have any switches, jumpers, wire posts, or other means of manipulation that could affect the operation or outcome of a game. The electronic gaming device may not have any functions or parameters adjustable through any separate video display or input codes except for the adjustment of features that are wholly cosmetic.
F. An electronic gaming device shall not have any of the following attributes: spinning or mechanical reels, pull handle, sounds or music solely intended to entice a player to play, flashing lights, tower light, top box, coin tray, ticket acceptance, hopper, coin acceptor, enhanced animation, cabinet or payglass artwork, or any other attribute identified by the department.
G. An electronic gaming device shall be robust enough to withstand forced illegal entry that would leave behind physical evidence of the attempted entry or such entry that causes an error code that is displayed and transmitted to the distributed pull-tab system. Any such entry attempt shall inhibit game play until cleared and shall not affect the subsequent play or any other play, prize, or aspect of the game.
H. The quantity of electronic gaming devices present at a social organization's location at which electronic gaming is operated and conducted shall not exceed the number authorized by the department for such location.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.
11VAC20-20-340. Cabinet wiring.
A. Proof of Underwriter Laboratories (UL) or equivalent certification shall be required for all submitted electronic devices.
B. An electronic gaming device shall be designed so that power and data cables into and out of the electronic gaming device can be routed so that the cables are not accessible to the general public.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.
11VAC20-20-350. Electronic gaming device identification.
An electronic gaming device shall have a permanently affixed device identifier that cannot be removed without leaving evidence of tampering. This device identifier shall be affixed to the exterior of the electronic gaming device and shall include the following information:
1. The manufacturer name;
2. A unique serial number;
3. The electronic gaming device model number;
4. The date of manufacture; and
5. Any other information required by the department.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.
11VAC20-20-360. Doors; compartments.
A. If an electronic gaming device possesses an external door that allows access to the interior of the machine the following rules shall apply:
1. Doors and their associated hinges shall be capable of withstanding determined illegal efforts to gain access to the inside of the electronic gaming device and shall leave evidence of tampering if an illegal entry is made;
2. All external doors shall be locked and monitored by door access sensors that shall detect and report all external door openings by way of an audible alarm, on-screen display, or both;
3. The electronic gaming device shall cease play when any external door is opened;
4. It shall not be possible to disable a door open sensor when the machine's door is closed without leaving evidence of tampering;
5. The sensor system shall register a door as being open when the door is moved from its fully closed and locked position; and
6. Door open conditions shall be recorded in an electronic log that includes a date and time stamp.
B. Electronic gaming devices that contain control programs located within an accessible area shall have a separate internal locked logic compartment that shall be keyed differently than the front door access lock. The logic compartment shall be a locked cabinet area with its own locked door that houses critical electronic components that have the potential to significantly influence the operation of the electronic gaming device. There may be more than one such logic area in an electronic gaming device. Electronic component items that are required to be housed in one or more logic areas are:
1. Central processing units and other electronic components involved in the operation and calculation or display of game play;
2. Communication controller electronics and components housing the communication program storage media or the communication board for the online system may reside outside the electronic gaming device; and
3. Logic compartment door open conditions shall be recorded in a log that includes a date and time stamp.
C. Electronic gaming devices that do not contain a door shall have adequate security for any panels or entry points that allow access to the interior of the device.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.
11VAC20-20-370. Memory clear.
A. Following the initiation of a memory reset procedure utilizing a certified reset method, the program shall execute a routine that initializes the entire contents of memory to the default state. For electronic gaming devices that allow for partial memory clears, the methodology in doing so must be accurate and the game application must validate the uncleared portions of memory. The electronic gaming device display after a memory reset shall not be the top award.
B. It shall not be possible to change a configuration setting that causes an alteration or obstruction to the electronic accounting meters without a memory clear.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.
11VAC20-20-380. Critical memory.
A. Critical memory shall be used to store all data that is considered vital to the continued operation of the electronic gaming device. Critical memory storage shall be maintained by a methodology that enables errors to be identified and corrected in most circumstances. This methodology may involve signatures, checksums, partial checksums, multiple copies, timestamps, or use of validity codes. This includes:
1. All electronic meters required in 11VAC20-20-440 E;
2. Current unused credits;
3. Electronic gaming device or game configuration data;
4. Recall of all wagers and other information necessary to fully reconstruct the game outcome associated with the last 10 plays;
5. Software state, which is the last state the electronic gaming device software was in before interruption; and
6. Error conditions that may have occurred on the electronic gaming device that may include:
a. Memory error or control program error;
b. Low memory battery, for batteries external to the memory itself or low power source;
c. Program error or authentication mismatch; and
d. Power reset.
B. Comprehensive checks of critical memory shall be made continually to test for possible corruption. In addition, all critical memory:
1. Shall have the ability to retain data for a minimum of 180 days after power is discontinued from the electronic gaming device. If the method used is an off-chip battery source, it shall recharge itself to its full potential in a maximum of 24 hours. The shelf life shall be at least five years. Memory that uses an off-chip back-up power source to retain its contents when the main power is switched off shall have a detection system that will provide a method for software to interpret and act upon a low battery condition;
2. Shall only be cleared by a department certified memory clear method; and
3. Shall result in an error if the control program detects an unrecoverable memory error.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.
11VAC20-20-390. Program storage devices.
A. All program storage devices (writable/nonwritable), including erasable programmable read only memory (EPROM), DVD, CD-ROM, compact flash, and any other type of program storage device shall be clearly marked with sufficient information to identify the software and revision level of the information stored in the devices.
B. Program storage devices shall meet the following requirements:
1. Program storage, including CD-ROM, shall meet the following rules:
a. The control program shall authenticate all critical files by employing a hashing algorithm that produces a "message digest" output of at least 128 bits at minimum, as certified by the recognized independent test laboratory and agreed upon by the department. Any message digest shall be stored on a read-only memory device within the electronic gaming device. Any message digest that resides on any other medium shall be encrypted using a public/private key algorithm with a minimum of a 512-bit key or an equivalent encryption algorithm with similar security certified by the independent test laboratory and agreed upon by the department.
b. The electronic gaming device shall authenticate all critical files against the stored message digests. In the event of a failed authentication, the electronic gaming device should immediately enter an error condition with the appropriate indication, such as an audible signal, on-screen display, or both. This error shall require operator intervention to clear. The electronic gaming device shall display specific error information and shall not clear until the file authenticates properly or the electronic gaming device's memory is cleared, the game is restarted, and all files authenticate correctly.
2. CD-ROM specific based program storage shall:
a. Not be a rewritable disk; and
b. The "write session" shall be closed to prevent any further writing to the storage device.
C. Electronic gaming devices where the control program is capable of being erased and reprogrammed without being removed from the electronic gaming device or other equipment or related peripheral devices shall meet the following requirements:
1. Reprogrammable program storage shall only write to alterable storage media containing data, files, and programs that are not critical to the basic operation of the game.
2. Notwithstanding subdivision 1 of this subsection, data may be written to media containing critical data, files, and programs provided that:
a. A log of all information that is added, deleted, and modified be stored on the media;
b. The control program verifies the validity of all data, files, and programs that reside on the media using the methods required herein;
c. The electronic gaming device's program contains appropriate security to prevent unauthorized modifications; and
d. The electronic gaming device's program does not allow game play while the media containing the critical data, files, and programs is being modified.
D. The control program shall ensure the integrity of all critical program components during the execution of said components and the first time the files are loaded for use even if only partially loaded. Space that is not critical to machine security (e.g., video or sound) is not required to be validated, although the department recommends a method be in place for the files to be tested for corruption. If any of the video or sound files contain payout amounts or other information needed by the player, the files are to be considered critical.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.
11VAC20-20-400. Touch screens.
Any touch screen must meet the following rules:
1. A touch screen shall be accurate once calibrated;
2. A touch screen shall be able to be recalibrated; and
3. A touch screen shall have no hidden or undocumented buttons or touch points anywhere on the touch screen, except as provided for by the game rules that affect game play.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.
11VAC20-20-410. Bill acceptors.
A. An electronic gaming device may have a mechanism that accepts United States currency and provides a method to enable the electronic gaming device software to interpret and act appropriately upon a valid or invalid input.
B. An acceptance device shall be electronically based and be configured to ensure that it only accepts valid bills and rejects all others in a highly accurate manner.
C. A bill input system shall be constructed in a manner that protects against vandalism, abuse, or fraudulent activity. In addition, a bill acceptance device shall only register credits when:
1. The bill has passed the point where it is accepted and stacked; and
2. The bill acceptor has sent the "irrevocably stacked" message to the machine.
D. A bill acceptor shall communicate to the electronic gaming device using a bidirectional protocol.
E. A bill acceptor shall be designed to prevent the use of cheating methods such as stringing, the insertion of foreign objects, and any other manipulation that may be deemed as a cheating technique.
F. If a bill acceptor is designed to be factory set only, it shall not be possible to access or conduct maintenance or adjustments to that bill acceptor in the field, other than:
1. The selection of bills and their limits;
2. Changing of a certified erasable programmable read-only memory or downloading of certified software;
3. The method for adjustment of the tolerance level for accepting bills of varying quality should not be accessible from the exterior of the electronic gaming device. Adjustments of the tolerance level should only be allowed with adequate levels of security in place. This can be accomplished through lock and key, physical switch settings, or other accepted methods approved on a case-by-case basis;
4. The maintenance, adjustment, and repair per approved factory procedures; and
5. The options that set the direction or orientation of bill acceptance.
G. An electronic gaming device equipped with a bill acceptor shall have the capability of detecting and displaying an error condition for the following events:
1. Stacker full (it is recommended that an explicit "stacker full" error message not be utilized since this may cause a security issue);
2. Bill jams;
3. Bill acceptor door open. If a bill acceptor door is a machine door, a door open signal is sufficient;
4. Stacker door open; and
5. Stacker removed.
H. An electronic gaming device equipped with a bill acceptor shall maintain sufficient electronic metering to be able to report the following:
1. Total monetary value of all bills accepted;
2. Total number of all bills accepted;
3. A breakdown of the bills accepted for each denomination; and
4. The value of the last five items accepted by the bill acceptor.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.
11VAC20-20-420. Payment by voucher printers.
A. If the electronic gaming device has a printer that is used to issue payment to the player by issuing a printed voucher for any unused game plays or winnings, the electronic gaming device shall meet the following rules:
1. The printer shall be located in a secure area of the electronic gaming device, but shall not be located in the logic area or any cash storage area. The bill acceptor stacker or logic areas containing critical electronic components shall not be accessed when the printer paper is changed; and
2. Data printed on a voucher shall include the following information regarding each voucher printed:
a. Value of unused game plays or winnings in United States currency, in numerical form;
b. Time the voucher was printed;
c. Date the voucher was printed;
d. Location name or site identifier;
e. Serial number of electronic gaming device;
f. Unique validation number or barcode if used in conjunction with a validation system; and
g. Expiration date and time.
B. If the electronic gaming device is capable of printing a duplicate voucher, the duplicate voucher shall clearly state the word "DUPLICATE" on its face.
C. The printer shall use printer paper containing security features such as a watermark as approved by the department.
D. A printer shall have mechanisms to allow the electronic gaming device to interpret and act upon the following conditions that must disable the game, and produce an error condition that requires attendant intervention to resume play:
1. Out of paper;
2. Printer jam or failure; and
3. Printer disconnect. The electronic gaming device may detect this error condition when the game tries to print.
E. An electronic gaming device that uses a voucher printer shall maintain a minimum of the last 25 transactions in critical memory. All voucher transactions shall be logged with a date and time stamp.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.
11VAC20-20-430. Payment by account.
A. Credit may be added to a player account via a cashier or point of sale station. Credit may also be added by any supporting electronic gaming device through credits won or bills.
B. Money may be removed from a player account either through downloading of credits to the electronic gaming device or by cashing out at a cashier's or point-of-sale station.
C. All monetary transactions between a supporting electronic gaming device and the distributed pull-tab system must be secured by means of a card insertion into a magnetic card reader and personal identification number (PIN) entry or by other protected means.
Statutory Authority
§ 18.2-340.15 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 39, Issue 14, eff. March 29, 2023.