(1) Personal information submitted by a participant under the self-exclusion program is exempt from public disclosure under the Public Records Act and may not be disseminated for any purpose other than the administration of the self-exclusion program or as otherwise permitted by law.

(2) No house-banked card room licensee, employee, or agent thereof shall disclose the name of, or any information about any participant who has requested self-exclusion to anyone other than employees and agents of the house-banked card room licensee whose duties and functions require access to such information.

(3) The licensee may release the names and identifying information of participants on the self-exclusion list to contracted service providers that provide check cashing, cash advances, marketing, automated teller machines, and other financial services.

(a) The identifying information must be limited to the address, driver's license or state-issued identification number, photograph, and physical description; and

(b) Only the name and identifying information may be disclosed to contracted service providers. The licensee must neither disclose the reasons for providing the name and identifying information nor disclose that the person is on the self-exclusion list; and

(c) The licensee must require by written contract that the contracted service provider implement measures designed to ensure the confidentiality of the names and identifying information and to prohibit the release of the names and identifying information to any other person or entity; and

(d) The licensee must immediately report to us all instances of a participant accessing or attempting to access the services provided by the contracted service providers.