Do Las Vegas Casinos Use Facial Recognition Technology? Privacy and Security Concerns

Some Las Vegas casino operators have reportedly used facial recognition technology as part of broader security and surveillance programs, although Nevada gaming rules do not specifically require it. What Nevada does require is casino surveillance systems that support regulatory goals, including protecting gaming operations, detecting improper activity, and maintaining public confidence in licensed gaming.

Because casino surveillance systems are intended to help safeguard assets and detect improper activity, casinos may use security tools to identify potential risks quickly. When facial recognition is used, it should be reviewed as part of a larger identification process, not treated as automatic proof by itself.

This guide explains how Las Vegas casinos may use facial recognition, why the technology raises privacy and security concerns, and what attorneys should evaluate when biometric evidence becomes part of a dispute.

How Las Vegas Casinos Use Facial Recognition

When casinos use facial recognition, the technology may compare live or recorded images against watchlists or other identity records. Those lists may include excluded persons under Nevada’s regulatory framework. Depending on the casino’s own policies, separate internal lists may also involve patrons banned from a specific property or individuals flagged for security review.

Casinos rely on surveillance systems to support security and regulatory goals. Facial recognition may be one possible tool within that broader surveillance environment, although Nevada’s gaming regulations do not specifically require it.

The practical goal remains similar: helping security teams identify people who may require closer review. From a reliability standpoint, facial recognition should usually be treated as an investigative lead, not final proof of identity. A stronger process would include human review, additional identity confirmation, and clear documentation before a casino takes enforcement action.

For example, in a hypothetical dispute, a report that says “possible match” or “positive match” may look persuasive at first. But that same result can become vulnerable if the source image was blurry, the threshold setting was not documented, the comparison database was not well maintained, or staff failed to record what evidence supported the final decision.

Nevada Gaming Rules and Excluded Persons

Nevada’s gaming framework supports strong casino surveillance, but it does not make facial recognition mandatory. The Nevada Gaming Control Board and Nevada Gaming Commission regulate casino surveillance and exclusion procedures. Nevada’s rules require compliant surveillance systems, but they do not identify facial recognition as a required tool.

One important part of Nevada’s system is the List of Excluded Persons. This list is governed by Nevada law and Nevada Gaming Commission Regulation 28. In practical terms, the exclusion list gives regulators and covered licensed gaming establishments a formal basis to exclude or eject certain people when the legal criteria are met.

Facial recognition may help a casino identify someone who appears on an exclusion list or another identity record, depending on the casino’s policies and the facts of the dispute. Still, the authority to exclude, remove, or restrict a person should come from the applicable legal, regulatory, trespass, or property framework. It should not come from the facial recognition alert alone.

That distinction matters in litigation. A technology alert may explain why security staff took a closer look, but it does not automatically prove that the person was correctly identified or that the casino followed the right process.

Privacy and Biometric Data Issues

Facial recognition raises privacy concerns because it involves biometric information. Face images, biometric identifiers, and data derived from facial measurements can create legal and security questions when they are collected, stored, shared, or retained.

Nevada law includes biometric data in its consumer health data privacy framework when the data is connected to covered health-status information. That does not mean every casino facial recognition use automatically falls under that law. Nevada’s consumer health data law is important, but it is not the same as a broad private-sector biometric consent statute that applies to all facial recognition activity.

That distinction matters because biometric privacy analysis depends heavily on context. Attorneys should look at what data was collected, why it was collected, how it was processed, whether a third-party vendor handled it, how long it was retained, and whether the use involved consumer health data or another legally protected category.

The privacy review should also go beyond asking whether the casino was allowed to use the technology. The stronger questions may involve notice, consent where applicable, data retention, vendor contracts, cybersecurity controls, access records, purpose limits, and whether the casino followed its own written policies.

Accuracy, Bias, and Reliability Risks

Facial recognition may help security teams act quickly when it is used, but speed does not eliminate the risk of error. A system may produce a false match because of poor image quality, lighting, camera angle, database issues, threshold settings, or algorithmic limitations.

Accuracy may also vary depending on the algorithm, the database, and demographic factors. For litigation purposes, attorneys should avoid treating a system output as a complete answer. The more important question is whether the full identification process was reliable.

A match may be challenged if the record does not show:

• The algorithm and version used
• The confidence score and threshold setting
• The quality of the image being searched
• The size and quality of the comparison database
• Whether the match was reviewed by trained personnel before action was taken
• Whether contrary identity evidence was considered
• Whether the system had known false-positive risks
• Whether the casino documented each step from alert to enforcement action

A strong expert should not treat a confidence score as proof of identity. The expert should explain how the system worked, what its limits were, whether the method was reliable, and how human reviewers handled the alert.

This is especially important when an enforcement decision depends on more than one step. A casino may have source video, still images, watchlist information, system output, staff notes, incident reports, or follow-up identification records, depending on the facts and its internal documentation practices. If those pieces do not line up, the reliability of the identification process may be open to challenge.

Exclusion, Trespass, and Responsible Gaming Issues

Facial recognition may also come up in exclusion and responsible gaming disputes. Attorneys should separate regulatory exclusion, property restrictions, and self-exclusion because each category may rest on a different legal or policy basis.

Nevada’s regulatory exclusion list is not the same thing as a casino’s internal property-ban list. A person may be listed in one system but not another. A person may also be restricted from a specific property based on separate property rights rather than formal regulatory exclusion.

Nevada’s express self-exclusion requirements are addressed in the interactive gaming rules. For land-based casino settings, restrictions may depend on separate property rights, trespass procedures, responsible gaming practices, voluntary self-limitation or self-exclusion programs offered by individual operators, or internal policy controls. Separate property-specific procedures may also be relevant, depending on the casino and the facts of the dispute.

When facial recognition is used in connection with those lists, reliability depends on the quality of the data, the system settings, and careful human confirmation. If the underlying list is outdated or the match is not properly reviewed, the technology can create more legal risk than protection.

For attorneys, the key is to identify the source of the restriction. Was the person excluded under Nevada’s regulatory process? Was the person excluded or ejected from a specific property? Was the person part of an online gaming self-exclusion process? Or was the person placed on an internal security list? Each answer may lead to a different legal analysis.

Why Facial Recognition Matters in Casino Litigation

In litigation, facial recognition usually matters because someone acted on the match. A patron may have been stopped, removed, denied access, or challenged based on an identification decision. Depending on the facts, the dispute may also involve trespass, investigation, or accusations of misconduct.

Once that happens, attorneys may need to examine whether the identification process was reliable from start to finish. The key issue is whether the casino can show a documented path from image capture to enforcement action. That includes the source video, the system output, the reviewer’s notes, the identity-confirmation steps, and the policy governing escalation.

A forensic technology expert may be helpful when the dispute involves algorithmic reliability, biometric matching, surveillance system design, database integrity, audit trails, or whether staff placed too much weight on an automated alert.

The strongest expert analysis usually does more than say whether the technology worked. It examines the full process. That includes how the image was captured, how the comparison was made, how the result was reviewed, how the decision was documented, and whether the final action was supported by evidence beyond the automated alert.