- Minimum age
- 21+
- KYC timing
- At account establishment; an account may not be created for anyone under 21 or a prohibited person, and identity must be re-verified immediately on reasonable suspicion of compromise (205 CMR 248.03 and 248.04).
- AML regime
- Internal controls must ensure compliance with the Bank Secrecy Act (31 USC 5311 to 5332), keep currency transaction reports and suspicious activity reports for five years, include anti-money laundering monitoring and controls on wagers and payouts over $10,000 and on structuring (205 CMR 238.14, 238.16, 238.17). Operators must immediately report suspicious or illegal wagering, including laundering, use of agents and false identification, to the MGC (chapter 23N, s. 11(e)).
- AML supervisor
- Massachusetts Gaming Commission (state internal control rules); federal anti-money laundering law applies alongside
- Deposit limits
- Category 3 operators must offer daily, weekly and monthly deposit limits and wager limits, displayed before registration, first deposit and first wager; tighter limits apply at once and looser ones only after the current period ends and the patron reaffirms (205 CMR 248.16, 255.02 and 255.03). Operators must re-offer limits monthly to patrons who have not set any.
- Session limits
- Patrons may suspend their account for a period of at least 72 hours (205 CMR 248.17).
- Data localisation
- Wagering and customer data may be hosted in the cloud but must be hosted in the United States (chapter 23N, s. 11(a)(v)).
- KYC requirements
- Registration requires full legal name, date of birth, a residential address that is not a post office box, the Social Security number or its last four digits (or a passport or taxpayer number for non-citizens) and a telephone number (205 CMR 248.03). Name, date of birth and Social Security number are verified electronically through an MGC-approved reference service, with knowledge-based authentication questions unless an alternative is approved (205 CMR 248.04). One account per patron with each operator, accounts are not transferable, and patrons acknowledge that no one else may use their account; proxy betting is prohibited (chapter 23N, s. 11(a)(iv); 205 CMR 248.01, 248.03, 248.05).
- Stake limits
- Patrons may set a maximum single wager and cumulative daily, weekly or monthly wager limits (205 CMR 255.02); there is no statutory stake cap.
- Mandatory player messaging
- Mobile platforms must display the telephone number and website of the Department of Public Health problem gambling helpline on every entry (chapter 23N, s. 4(d)(3)); advertising must carry the Massachusetts Problem Gambling Helpline number and link (205 CMR 256.06).
- Reporting obligations
- Immediate reports to the MGC of criminal or disciplinary proceedings, abnormal betting, integrity breaches and suspicious or illegal wagering (chapter 23N, s. 11(e)); monthly underage reports by the 10th (205 CMR 250.04); immediate notice of a suspected data breach followed by an investigation and written report (205 CMR 257.06); monthly tax returns by the 15th (s. 14(b)).
- Game content restrictions
- No wagers on high school or youth sports, on Massachusetts college teams except in tournaments of four or more teams, on individual athlete performance in any college event, or on injuries, penalties, player discipline or replay review (chapter 23N, s. 3; 205 CMR 247). Only events and wager categories approved in the MGC event catalogue may be offered. Athletes, coaches, referees, team owners and operator staff are barred from betting (s. 11(a)).