Technical Foundations and Fairness CT-GT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a best practice for protecting player data in a gambling operation?

   • AStoring all player data in a single unencrypted database for easy access
   • BEncrypting player data both in transit and at rest
   • CSharing player data with third-party marketers without consent
   • DKeeping player data indefinitely to analyze trends
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which regulation is specifically designed to protect the privacy of personal data of individuals within the European Union?

   • AHealth Insurance Portability and Accountability Act (HIPAA)
   • BGeneral Data Protection Regulation (GDPR)
   • CSarbanes-Oxley Act (SOX)
   • DPayment Card Industry Data Security Standard (PCI DSS)
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   An online gambling operator is expanding into a new jurisdiction with strict data protection laws. They must collect player data for account creation but also need to share minimal data with a payment processor. The compliance officer is concerned about cross-border data transfers. What is the most appropriate approach?

   • AAnonymize all player data before storing it, so no personal data is collected.
   • BTransfer all player data to the company's headquarters in another country for centralized processing.
   • CStore all player data in the new jurisdiction and only transfer the minimum necessary data to the payment processor, using approved transfer mechanisms.
   • DRely on the payment processor to handle all data protection compliance.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A player is using a mobile device with GPS enabled, but the geolocation system is unable to determine their location because GPS is not available indoors. The player's IP address is in a legal region. What should the system do?

   • AUse Wi-Fi positioning and cellular tower triangulation as fallback methods to determine the player's location.
   • BAllow the player to play based on the IP address alone.
   • CBlock the player because GPS is not available.
   • DAsk the player to move to a location with GPS signal.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A gambling operator is subject to GDPR and must respond to a player's request to delete their personal data. However, the operator is also legally required to retain transaction records for tax purposes. What is the most appropriate action?

   • ARefuse the request entirely because the operator has a legal obligation to retain data.
   • BDelete all data immediately to comply with the player's request.
   • CDelete the personal data that is not required for legal retention, and retain only the transaction records necessary for tax compliance.
   • DAnonymize the transaction records so they cannot be linked to the player.
   Reveal Solution Discussion Select an answer first