In an Apr. 29 meeting to vote on whether sports betting operators Fanatics and Caesars could use alternative methods for authentication during account creation, the Massachusetts Gaming Commission unanimously voted to allow each to move forward with implementing its new technologies. The alternative methods were not disclosed to the public as they contained matters related to cybersecurity and was said to jeopardize public safety. Members of the Commission entered into an “executive session” with representatives from both operators to discuss the methods further.
Massachusetts made sports betting legal in 2022 and mobile eligibility launched last year for users. With Fanatics and Caesars finding alternatives to what the committee saw as ‘normal’ practice for knowledge-based authentication (KBA), other operators could try and maneuver around regulations as well.
Most apps continue to use social security numbers as the main source of security to authorize the start of new betting accounts, either the full number or the last four digits. While it remains unclear what sources of newfound security measures Fanatics and Caesars are attempting to use, the Commission returned with no qualms about what was discussed in the executive session. Commissioners Brad Hill, Nakisha Skinner and Eileen O’Brien along with interim chair Jordan Maynard asked no further questions, not accounting for those related to clarity, after the private session completed and voted in unison without hesitation.
Both operators have been working under a waiver exempt period that runs through July 10, 2024, at which time it will remain to be seen if either Fanatics or Caesars are ready to implement the new technologies on its apps for the state. The waiver allowed each to prepare the technology for approval.
As per the decision, these new methods will be seen as accepted variations within the eyes of the Commission, meaning other operators can choose to mimic these methods or adhere to the original formats accepted by the state. Any new variations will require separate approval, the only question Commissioner Hill asked after the session concluded for clarity reasons.
