They must apply strict years-confirmation rules to prevent underage gaming