(1) A casino operator must have an identity verification policy that is approved by the Commission.
Penalty: 20 penalty units.
(2) A casino operator must ensure that the casino operator and all casino employees comply with the identity verification policy.
Penalty: 20 penalty units.
(3) The identity verification policy must outline how a casino operator will meet its obligations under regulations 9, 11, 12, 13, 20 and 24, including—
(a) what forms of identification the operator will accept; and
(b) what reasonable steps the operator will take to verify a person's identity; and
(c) what reasonable steps the operator will take to confirm the validity of identification documents presented by a person; and
(d) what reasonable steps the operator will take to determine whether a person is ordinarily resident in Australia; and
(e) risk-based guidance to inform when and how further checks are to be conducted for the purposes of regulations 9(3) and 12(9); and
(f) what reasonable steps the operator will take to prevent access, use and disclosure of information collected for the purpose of identity verification for non-regulatory purposes.
(4) The identity verification policy must outline the training that will be given to casino employees to assist with identity verification.
(5) The identity verification training must include a component on recognising security features in passports.
(6) The identity verification policy must outline how the casino operator will deal with winnings and accumulated credits if the casino operator cannot verify a person's identity in accordance with regulation 11.
(7) Any changes to the identity verification policy must be approved by the Commission in accordance with regulation 24.