All 55 New Jersey standards,
organised by theme

Internet wagers may be accepted only from patrons who are physically present within the State of New Jersey at the time the wager is placed. Operators must deploy geolocation technology capable of reasonably detecting and preventing out-of-state wagering.

Every New Jersey casino licensee (including iGaming operators) must prepare and file an initial system of internal procedures and administrative and accounting controls at least 30 days before gaming operations commence. The system must cover administrative decision-making, accounting safeguards for assets and financial records, and security procedures. Licensees must conduct gaming operations consistent with those controls and file changes in a Division-approved manner.

A casino licensee offering Internet and mobile gaming must maintain an IT department located in New Jersey that includes an IT department manager, IT security officer, and an Internet and mobile games manager, each licensed as a casino key employee. The Internet and/or mobile manager reports to the IT department manager and is responsible for ensuring the proper operation and integrity of Internet and/or mobile gaming, including reviewing all reports of suspicious behavior. The internal audit department must also perform a quarterly review of IT data security of the gaming systems when Internet or mobile gaming is offered.

A patron must establish an Internet or mobile gaming account before engaging in Internet or mobile gaming. Play without a registered account is not permitted.

To open an Internet/mobile account the licensee must create an encrypted patron file, verify identity (via N.J.A.C. 13:69D-1.5A plus recorded credential number or an approved remote multi-source method), confirm age 21 and non-exclusion, record acceptance of terms and certifications, and notify the patron of account creation.

A casino licensee may operate an electronic account-based wagering system that lets patrons upload and download efunds, subject to Division testing and approval of all hardware and software. The internal audit department must test a sample of transaction locations at implementation, after approved changes, and semi-annually. Non-cashable efunds must be automatically wagered before cashable efunds, and all restrictions on non-cashable efunds must be disclosed to patrons.

DGE guidance (not binding regulation) that operators authenticate core identity fields via multi-source authentication before any deposit or patron-initiated activity, and take reasonable measures to confirm the person creating the account is who they say they are.

DGE guidance (not binding regulation) that re-entered or modified KYC data trigger a fresh multi-source authentication as the final step, that manually verified accounts be logged weekly to compliance leadership, and that systems block account creation using the KYC data of a deceased person.

DGE guidance (not binding regulation) that all Internet gaming operators implement multi-factor authentication for patron logins to defend against credential stuffing and account takeover, with a same-device exemption capped at two weeks and heightened scrutiny for accounts tied to more than three devices in 24 hours.

The problem-gambling helpline message must appear prominently on the log on screen and be transmitted to display on log off whenever the system detects a log off.

Software must either continuously display current time and elapsed session time or show a prominent pop-up at least every half hour with time and elapsed session time since log on.

Operators must train patron-contact employees at the start of employment and at regular intervals on recognizing problem gambling, assisting players, responding to disclosures, and responding to third-party reports. CCGNJ-aligned training is deemed sufficient.

The system must suspend an account when a patron requests (for at least 72 hours), when the Division requires it, or when the licensee has evidence of illegal activity, negative balance, or terms-of-service violation. While suspended, the system must block wagering, deposits, most withdrawals, account changes, and removal from the system, and must prominently display the suspension status and restoration path. Restoration occurs on expiration, Division permission, or licensee lift.

The system must let patrons set deposit, spend, and time-based responsible-gaming limits with asymmetric effectuation (decreases apply by next log in; increases only after the prior period expires and the patron reaffirms). The system must automatically block wagers by persons under 21, self-excluded persons, Internet self-exclusion list persons, excluded persons, closed or suspended accounts, and patrons exceeding spend or time limits.

When a patron's lifetime deposits exceed $2,500, the system must immediately block wagering until the patron acknowledges the deposit threshold, the ability to set RG limits or close the account, and the availability of 1-800-GAMBLER. The limits/hotline acknowledgement must then be repeated annually.

DGE guidance (not binding regulation) that each platform implement, at a minimum, automated triggers covering account activity and play behavior to identify potential problem gamblers, with recommended numeric thresholds.

DGE guidance (not binding regulation) that providers implement a three-phase intervention approach when RG automated trigger alerts are identified, escalating from outreach to video tutorial to direct contact by an RG professional.

Client terminals used for Internet or mobile gaming may not hold patron account information or the game logic that determines outcomes, and client terminal software may not contain malware or any feature that compromises terminal integrity.

Before implementing a controlled computer system, a licensee's IT department must employ internal controls ensuring accuracy, reliability, and system integrity. Critical software and hardware require prior Division approval with Release Notes, systems must survive outages through redundancy and backups, and personal patron data must be protected. Licensees must notify the Division within 72 hours of a suspected personal patron data compromise and within 24 hours of critical malfunctions or security events.

Server-based gaming systems must comply with N.J.A.C. 13:69D-2 and include UPS, data-integrity preservation on shutdown, state recovery after outages, physical/logical hardware controls, and Division-approved software-installation gating. Software must be validatable via a GAT or equivalent, authenticated on demand and at least every 24 hours, with operator cessation and Division notification on any authentication failure.

Before and during play, patrons must be able to see game identification, play/payout rules (not reliant on sound), and all fees/rake/vigorish. Game play must begin only on an affirmative wager (no auto play without approval); server-based table games must replicate their non-electronic counterparts and show min/max wagers and help screens; peer-to-peer games must exclude bots and offer random-seating. Disconnect handling must follow Division-approved rules with defined behavior for no-input, single-patron, and multi-patron games, including game-recall for timed multi-patron games.

Table game simulcasting requires Division approval and a simulcast control server that gives the patron real-time visual access, prevents pre-wager outcome disclosure, records dealer-verified results before posting, and can void results. Patrons must receive real-time wagering and game-play information (table number, minimums/maximums, decks, dealer actions, wager, outcome, vigorish, odds, win/loss) and, on the client terminal, game ID, rules (not reliant on sound), and all charges.

All terms and conditions for Internet or mobile gaming must be appended to the licensee's internal controls and cover the full operation — contractual parties, consent to age/identity checks, prohibitions (account sharing, out-of-state play, bots), fees, account statements, privacy, legal age, dormant account forfeiture, right to set RG limits and self-exclude, right to 72-hour suspension, disconnect handling, malfunction-voids-pays, withdrawal timing, and a patron protection page accessible during every session. The patron protection page must show the 1-800-Gambler message, links to CCGNJ and another U.S. problem-gambling organization, RG information, credential recovery, complaint methods, underage warnings, federal-law notices, and mobile boundary notice.

No-wager games offered through the gaming system must comply with payout-percentage caps (if similar to an approved game) or prominently disclose that the game is for entertainment only and is not Division-approved. The system must not induce continued wagering, and social games funded from the patron account must show a clear notice that they are not Division-regulated.

All bonus and promotional wagering offers must be stated in clear and unambiguous terms, be accessible to the patron, and be maintained in an electronic file available to the Division, with offer metadata (date/time presented, active and expiry dates, eligibility, and redemption requirements).

Accounts may be funded only via Division-approved methods including deposit accounts, credit/debit cards, cashier deposits of cash/chips/tokens, verified non-transferable reloadable prepaid cards, promotional or bonus credits, winnings, or documented adjustments. Withdrawals must occur only via approved channels, patron-to-patron transfers are prohibited, and credit/debit card deposits must be refunded to the originating card up to the deposit amount before other withdrawals are processed.

The licensee must hold patron funds in a separate New Jersey bank account at or above the sum of daily ending cashable balances, funds on game, and pending withdrawals. The casino controller or above must file monthly attestations with the Division that the funds are safeguarded.

Gaming systems must generate a daily Dormant Account Report beginning one year after the first account, a monthly Performance Report comparing theoretical to actual RTP, a daily Patron Account Adjustments Report reviewed by the permit holder or intermediary (with weekly permit-holder review if the intermediary performs daily review), and a weekly report identifying potential problem gamblers (including self-reporters) that the licensee reviews and documents. Completed wagering transactions may not be voided without Division approval.

Money owed to a patron as a result of a gaming transaction must be claimed within one year of the date of that transaction; otherwise the casino licensee's obligation to pay expires. When obligations expire, 25 percent of the total value must be paid to the Casino Revenue Fund and 75 percent retained by the licensee for exclusive use in marketing. Monthly reporting and payment to the Division are required by the 20th day of each calendar month.

Each patron complaint related to Internet gaming must be investigated with a response to the patron within five calendar days. Unresolved complaints about accounts, game outcomes, or illegal activity must be forwarded to the Division with all documentation; other complaints are reported biweekly or at a Division-approved frequency.

The Division may authorize New Jersey permit holders to accept wagers from patrons outside New Jersey under a state-level reciprocal agreement consistent with federal and foreign law. No organization other than a permitted Atlantic City casino or its Internet gaming affiliate (with all equipment located in Atlantic City) may make its premises available for Internet wagering or advertise such use; violations carry penalties of $1,000 per patron per day and $10,000 per advertising violation.

New Jersey maintains a list of persons required to be excluded or ejected from every licensed casino and from Internet gaming. A person qualifies based on a prior gaming-related conviction, a career/documented cheating or organized-crime affiliation, or conduct posing a threat to the integrity of casino gaming.

Once a person is placed on the exclusion list, every licensed casino and Internet gaming permit holder has an affirmative duty to prevent that person from gaming on its premises or through its online platform. The duty attaches upon notice of the listing.

Any winnings accrued by a person on the exclusion list while wagering at a licensed casino or via Internet gaming are subject to forfeiture. Operators must withhold payouts to identified excluded persons and remit the funds as directed by the Division.

A person placed on the exclusion list may petition the Division for removal after a fixed waiting period. The petitioner bears the burden of demonstrating that the original grounds no longer warrant exclusion.

The exclusion list and related investigative records are confidential. Licensees receiving the list must use it solely for compliance purposes and must not disclose it except as authorized by the Division.