In order to prevent the unauthorized use of a fantasy contestant's account, a fantasy contest operator offering fantasy contests must use technologically and commercially reasonable measures to reasonably detect the physical location of a fantasy contestant attempting to access a fantasy contestant account and to monitor for simultaneous logins to a single account from geographically inconsistent locations. A fantasy contest operator may use a third party to provide these location services.
1. The geolocation service or application must be able to perform as follows:A. Detect location notwithstanding the use of a proxy server;B. Detect location when routing through a Virtual Private Network (VPN);C. Use Global Positioning System (GPS) data when the fantasy contestant seeks access from a mobile device or network and prohibit users from entering contests or depositing funds if GPS is not turned on;D. Check location each time the fantasy contestant attempts to enter a contest or make a deposit;E. Utilize a mechanism to alert the fantasy contest operator if an account is being accessed from geographically inconsistent locations. For example, technology that alerts the fantasy contest operator that login locations were identified that would be impossible to travel between in the time reported.2. The fantasy contest operator should implement procedures to disable account access if the fantasy contest operator receives information that an account is being accessed from a location that indicates that there is a likelihood of unauthorized or improper access.16-633 C.M.R. ch. 37, § 2