(1) A person's control procedures for gaming machines and peripheral equipment must include operational details (including who is responsible) for each of the following:
(a) accounting and record keeping in relation to the gaming machines and peripheral equipment;
(b) access to and handling of cash in relation to the gaming machines;
(c) payment of winnings;
(d) access control to the gaming machines and peripheral equipment;
(e) security of the gaming machines and peripheral equipment;
(f) security of cash, records and keys in relation to the gaming machines;
(g) job descriptions (including responsibilities) of people operating and doing accounting and record keeping in relation to the gaming machines and peripheral equipment;
(h) any marketing and promotion of the gaming machines.
(2) A person may change the person's control procedures by written notice given to the commission.
(3) A regulation may make provision in relation to control procedures.