Developing Ohio Wants 48 Hours of Silence After You Set a Deposit Limit. It Is the Third Time in Four Months the State Has Reopened the Same Rule
The draft is one new paragraph in a rule about account registration. It would bar a sportsbook from sending any direct marketing, push notifications included, to a customer for two days after they enable or change a responsible-gambling tool. We have not seen that sentence in any other state's rule book. The reason it matters is the word "change," which cuts both ways.
October 17, 2026 at 6:43 PM EDT
7 min read
The sentence Ohio posted on Friday is 68 words long and it sits inside a rule about how to open an account. New paragraph (E) of Rule 3775-16-03: "A sports gaming proprietor must not send direct advertisements containing marketing or promotional material, including push notifications or any other digital or physical direct marketing, to any individual within forty-eight hours of the individual enabling or changing any responsible gambling tool or mechanism, including wager or deposit limits, other than during initial account creation." Comments are due at 5 p.m. on October 30. The draft is stamped "NOT YET FILED" and carries a print date of October 13, and the Commission's own summary of the change is a single paragraph that says the same thing in fewer words.
That is the entire proposal. It is the third amendment to the same rule the Casino Control Commission has opened in four months, after a July 7 draft to strip credit cards from the list of permitted deposit methods and an October 5 draft tightening identity verification, whose comment window closed the day this one opened. Rule 3775-16-03 is turning into the place Ohio writes down what it thinks the inside of a betting app should look like.
What the rule already says, and what the new line adds to it
The existing rule is long and mostly administrative: who may hold an account, what the operator must record, how identity is verified. Two parts of it matter here. At account creation a patron "must be notified of available responsible gaming resources." And a deposit-enabled account must offer, "immediately upon initial account registration and at all times," an "easy and obvious" way to set limits on deposits, wagers and time, implemented at once, loosened only after the chosen period runs out, with an option to make them auto-renew. Ohio has required the tools since launch. It has never said anything about what the operator may do with the information that a customer just used one.
That is the gap paragraph (E) closes, and it closes it from the operator's side rather than the customer's. The book knows the second a limit is set. It knows the amount, the type, and whether it was tightened or loosened, because its own system implemented the change. Today nothing in Ohio's rules prevents that event from feeding the same marketing engine that decides who gets the Sunday-morning push notification. The draft makes the event a blackout trigger instead. For two days after you touch the tool, the book is not allowed to talk to you except to answer.
The scope is narrower than the headline. The paragraph covers "direct" marketing: push notifications, email, text, mail. It does not, on its face, reach the generally available offers a customer sees on opening the app, which are not sent to "any individual." Initial account creation is carved out, so the welcome bonus survives. And forty-eight hours is forty-eight hours. A bettor who sets a deposit limit at 9 p.m. on a Friday is back on the push list at 9 p.m. Sunday, in time for the late window.
The word "changing"
Here is the part of the draft that we think its own authors may not have fully priced. The trigger is "enabling or changing" a tool. Enabling is the obvious case: a customer sets a limit, and for two days the book may not try to sell around it. Changing is broader. Under the existing rule a limit can only be made less severe after its period expires, so "changing" includes the moment a bettor's monthly cap lapses and they raise it, or remove it. That is the chase case. It is the moment a responsible-gambling clinician would most want silence, and it is the moment the current rule book treats as just another account event.
Read literally, the draft gives the book the same two days of quiet after a limit goes up as after it goes down. We do not know whether the Commission meant that. The summary does not distinguish, the draft does not define "changing," and no Business Impact Analysis has been published yet because the rule has not been filed. If the final text keeps the word, Ohio will have written the first rule we know of that treats loosening a limit as a protected event. If it narrows the word to "enabling," it will have written a much smaller rule, and one that leaves the most dangerous click unaddressed.
Why a 48-hour rule and not a bigger one
The obvious objection is that two days is a gesture. New York went further this month, as this site reported on October 11, by prohibiting personalised promotions built on a customer's own play. Massachusetts has sent its operators eight questions about how they use artificial intelligence, with answers due November 3, per InGame. Louisiana's regulators asked DraftKings about the same thing at Thursday's licence hearing and got Paul Liberman's "We do not use AI in any way to target losing gamblers." Against that backdrop, a two-day pause after a limit is set looks like the smallest thing a regulator could do and still issue a press line.
The better answer is that Ohio has chosen the one version of this rule that does not require the regulator to know how the marketing engine works. New York's approach needs a definition of personalisation and an audit to enforce it. Massachusetts' questionnaire needs the operators to describe their own models honestly. Ohio's paragraph needs a timestamp. Either the push went out inside 48 hours of the limit event or it did not, and both facts are in the operator's logs. It is enforceable with a records request. That is not a small virtue in a field where every other rule depends on the regulated party explaining its own software.
The industry's case, which it made once already
The strongest argument against the rule is in the Commission's own files. In 2023 Ohio ended sportsbook promotions triggered by non-gaming purchases, by email on June 28 with a July 7 confirmation deadline, and then wrote the ban into Rule 3775-16-09. Fanatics' comment on that rule, attached as Exhibit E to the Commission's 2024 Business Impact Analysis, is the template for what operators will say about this one. The Commission, it wrote, "has not cited any study or statistical basis" for its belief that the promotions increased the risk of problem gambling, and the restriction was "the first of its kind in the industry." The Commission's reply, in the same document, was that "no scientific data was necessary to develop or measure" the amendment, and that R.C. 3775 gives it "specific and broad authority" to ensure advertising does "not target vulnerable individuals."
Expect the same exchange. Operators will say there is no evidence that a push notification sent 30 hours after a deposit limit causes harm, that the tools already exist and are already used, that existing Rule 3775-16-08 already requires opt-outs, age verification and exclusion-list screening on every direct offer, and that a blanket blackout punishes the customer who set a limit to be prudent rather than because they were in trouble. All of that is true, and the last point is the one with real force: most people who set a limit are not at risk, and the rule treats them identically.
We think the Commission has the better of it anyway, for a reason the 2024 exchange did not reach. The 2023 ban was about promotions that found people who had not asked to be found. This one is about people who have raised a hand. A customer who sets a limit has told the operator something specific about their relationship with the product, and the only question the rule asks is whether the operator may act on that information commercially inside two days. The industry's answer, that it has no evidence doing so is harmful, is an argument about the state's burden. The rule's premise is that the burden is on the party that holds the data.
What would make this column wrong
If the final rule narrows "changing" to "enabling," Ohio will have protected the easy case and not the hard one, and the piece above overstates what it did. If the Commission's Business Impact Analysis, when it comes, cites no basis beyond the 2024 language, the Fanatics argument will be as strong as it was two years ago. And if operators simply route the Sunday push to hour 49, the rule will have changed the timing of a message and nothing about its intent, which is the outcome a two-day window invites.
The thing to watch is the comment file on October 30. The 2024 rule drew three stakeholder comments and the Commission changed nothing in response. This draft is shorter, cleaner and harder to argue with on the facts, because the only fact it relies on is one the books already keep.