Related Questions
.png)
Gaming vs. gambling is not a labeling question. It is a classification question, and it carries different legal obligations, scheme rules, license requirements, and consumer protection standards depending on how the product mechanics resolve. A merchant that presents as a "gaming platform" but operates prize-bearing chance mechanics is not a gaming merchant. It is a potential gambling operator without the required regulatory controls, and the payment processor that onboards it without performing the classification analysis carries the resulting exposure.
This guide provides the complete assessment framework we use to evaluate gaming-adjacent merchants: the legal architecture that determines classification, the four merchant types most commonly misclassified, the six dimensions we examine in underwriting, compliant merchant profiles, and the errors that leave risk teams exposed.
In virtually all US jurisdictions, and in comparable international frameworks, an activity constitutes illegal gambling when three elements are present simultaneously: consideration, chance, and prize. Removing any one of the three elements typically takes the activity outside gambling law, though the precise legal threshold varies by jurisdiction. (Source: Olshan Law, Sweepstakes Law Basics.)
Consideration is something of value provided to participate. This is most commonly money (a purchase, entry fee, or wager), but may include non-monetary value in some jurisdictions.
Chance is the degree to which outcome is determined by a random or uncontrollable process rather than skill. Most US states apply the "dominant factor" test, also called the predominance test, to determine which factor controls. Under this test, if chance is the primary determinant of outcome, the activity is legally treated as a game of chance, regardless of whether skill also plays a role.
Prize is anything of value awarded based on outcome: cash, gift cards, merchandise, or in-game items with real-world monetary value.
Risk teams evaluating gaming-adjacent merchants should apply this three-element test to the product mechanics before accepting any merchant-provided category description. The legal classification follows from the mechanics, not from the merchant's self-identification.
These merchant types appear regularly in underwriting queues at acquiring banks, PayFacs, and marketplace platforms. Each presents as something other than gambling. Each requires structured evaluation before a classification decision is made.
Skill games are digital competitions where players pay an entry fee, compete against each other, and win a cash prize. The merchant's application typically describes the product as a "competitive gaming platform," a "tournament marketplace," or an "esports entry system." The word "gambling" does not appear.
The relevant legal question is not whether the game involves skill. It is whether skill is the dominant factor in determining outcome, evaluated under the applicable jurisdiction's legal test.
A game where outcomes are meaningfully controlled by player decisions and abilities, with chance playing only a subordinate role, may qualify as skill-dominant and avoid gambling classification. A game where random elements (card draws, dice rolls, unpredictable opponent matching, or randomized level generation) materially affect outcomes may be classified as a game of chance and therefore gambling, regardless of the merchant's framing.
Jurisdiction determines the applicable standard. A skill game operating legally in one US state may not be legal in another. Certain US states apply more restrictive standards or have not clearly exempted skill-for-prize competitions from their gambling statutes. Operators should obtain jurisdiction-specific legal analysis before serving users in any state where the legal position is not confirmed.
A loot box is a purchasable randomized reward package in a video game that delivers items whose contents and relative value are not known at the time of purchase. The player pays real money (or in-game currency purchased with real money) for a randomized output. The structure maps directly onto the three-element test: consideration (the purchase), chance (the randomized outcome), and prize (the items received, some of which may carry in-game or real-world value).
Regulatory treatment of loot boxes varies by jurisdiction. Belgium classified paid loot boxes as gambling in 2018 under a Belgian Gambling Commission ruling, making them illegal under Belgian gambling law, and publishers have generally blocked the paid mechanic for Belgian users. (Source: VGFB, Loot Boxes in Belgium.) The Netherlands, following court proceedings, has imposed requirements on paid loot boxes that provide in-game advancement. The United States does not currently have federal legislation classifying loot boxes as gambling, though state-level legal frameworks have been identified under which they could be so classified, particularly where items carry real-world cash value.
For acquirers and PayFacs, a gaming merchant operating a loot box mechanic in Belgium without geo-blocking the paid mechanic is not a low-risk gaming merchant. It is a merchant operating outside its required compliance framework in that jurisdiction. The exposure follows from that classification.
Sweepstakes-based platforms are among the most legally complex gaming-adjacent merchant types in active use. The core structure is designed to remove the consideration element from the gambling triad. Players can obtain virtual play currency without a purchase through a free Alternative Method of Entry (AMOE). Because consideration is ostensibly absent, the operator argues the product is a legal sweepstakes rather than regulated gambling.
This structure is legally recognized in the US where properly implemented. For it to be valid, the AMOE must be genuinely free and reasonably accessible. Where the free entry route is buried, deliberately difficult to access, or functionally discouraged by platform design, regulators and courts may find that consideration is effectively present, and the sweepstakes protection fails.
Legal scrutiny on this model has increased. A December 2024 analysis in Forbes identified structural vulnerabilities in consideration analysis for sweepstakes casino operators, noting that where free coin acquisition is nominal relative to paid acquisition, the substance-over-form argument strengthens for regulators. (Source: Forbes, Sweepstakes Casinos Face Long Legal Odds, December 11, 2024.)
Risk teams should treat sweepstakes casino merchants as subject to actively changing regulatory status and build monitoring review cycles accordingly.
Free-to-play games that do not offer cash prizes appear, at initial review, to sit clearly outside gambling classification: there is no prize of real-world value, so the prize element is absent. This analysis holds in many cases but not all.
The risk surface increases when virtual currency or items obtained through randomized mechanics have real-world value, either because the game operator facilitates exchange or because an active secondary market exists. Where a player can purchase a randomized item through a loot box mechanic and sell that item for real money on a third-party marketplace, the prize element is arguably present in practice, regardless of whether the game operator created the secondary market.
Additionally, the Children's Online Privacy Protection Act (COPPA) in the US creates specific obligations for digital platforms directed at or used by children under 13. Where a gaming platform with paid chance mechanics is accessible to minors, COPPA obligations and equivalent international frameworks attach independently of any gambling classification. The FTC issued a COPPA policy statement in February 2026 specifically addressing age verification, signaling active enforcement intent. (Source: FTC, COPPA Policy Statement on Age Verification, February 25, 2026.)
When we evaluate a gaming-adjacent merchant for classification, we work across six dimensions. These dimensions apply at initial underwriting and should be revisited during ongoing monitoring, because product mechanics and monetization models change after onboarding.
Why it matters
Consideration is the first element of the gambling triad. If players do not provide something of value to participate in the relevant mechanic, the activity is unlikely to meet the gambling definition regardless of how the other two elements resolve. Conversely, where consideration is present and the other two elements also appear, the full triad is satisfied. The consideration analysis is the starting point for every classification review.
High-Risk Consideration Patterns
Mandatory real-money entry to compete for prizes:
Embedded consideration in purchase flows:
Why this is high risk: If consideration is present alongside chance and prize, all three elements of the gambling triad are satisfied. The mechanic requires gambling-level due diligence regardless of how the merchant categorizes the product.
Genuine free-to-participate structure:
Clear separation of paid and prize mechanics:
What to Request from the Merchant
Testing Protocol
Merchant Assessment Checklist
Red Flag Thresholds
Why it matters
The chance element determines whether the product is a game of skill or a game of chance. Under the dominant factor test applied in most US states, if chance is the primary determinant of outcome, the activity is classified as gambling regardless of whether skill also plays a role. The classification analysis cannot stop at "skill is involved." The question is whether skill or chance controls outcomes on balance.
Randomized outcome mechanics:
Chance-dominant competition structures:
Why this is high risk: Where the dominant factor test would find that chance controls outcomes, the activity likely meets the gambling definition if the other two elements are also present.
Skill-dominant competition structures:
Documented skill analysis:
What to Request from the Merchant
Testing Protocol
Merchant Assessment Checklist
Red Flag Thresholds
Why it matters
The prize element is the third component of the gambling triad. Where outcomes carry no real-world value, the prize element may be absent and the activity may not meet the gambling definition even if the other two elements are present. The analysis requires examining not only what the merchant formally offers as prizes but whether an active secondary market creates de facto prize value, even without the merchant's direct involvement.
Cash or cash-equivalent prizes:
Secondary market value for virtual items:
Why this is high risk: Where prize value is present in practice, even through secondary markets the merchant did not create, the prize element of the triad may be satisfied. The merchant's position in its terms of service does not override the functional reality of how items are valued and exchanged.
Non-redeemable in-game rewards:
Clear prize disclosure for redeemable prizes:
What to Request from the Merchant
Testing Protocol
Merchant Assessment Checklist
Red Flag Thresholds
Why it matters
Gambling regulation in virtually all jurisdictions sets minimum age thresholds, typically 18 or 21 depending on jurisdiction and product type. Gaming-adjacent products that present chance mechanics or prize structures to minors create regulatory exposure across multiple frameworks simultaneously: gambling regulation (where classification is in question), child protection law (COPPA in the US, GDPR for minors in Europe), and scheme rules that may restrict gambling-related products from marketing to minors. Age targeting is an independent escalation trigger in our assessments, regardless of how the underlying mechanic resolves on the three-element test.
Inadequate or absent age verification:
Marketing directed at minors:
Why this is high risk: A product accessible to and marketed toward minors, which also includes paid chance mechanics, may trigger multiple regulatory frameworks simultaneously, independently of whether the underlying activity is formally classified as gambling.
Document-verified age controls:
Age-appropriate marketing:
What to Request from the Merchant
Testing Protocol
Merchant Assessment Checklist
Red Flag Thresholds
Why it matters
Regulatory status for gaming-adjacent products is jurisdiction-specific. The same product may be legal in one US state, illegal in another, and subject to a specific licensing regime in a third. The same variation applies across countries. A merchant operating a skill game platform that has obtained a legal opinion confirming skill-dominance under California law has not cleared its legal position in states with more restrictive standards. A sweepstakes platform compliant with US law may be operating an unlicensed gambling product in certain European jurisdictions.
A merchant that claims to restrict certain markets but cannot provide technical evidence of those restrictions, or whose platform can be accessed from restricted markets through VPN use, has not demonstrated adequate geo-compliance.
Absent or non-functional geo-restrictions:
Incomplete jurisdictional coverage:
Why this is high risk: Merchants that serve users in jurisdictions where their product is unlicensed or prohibited are operating outside their legal authorization, regardless of whether technical controls were intended but not implemented effectively.
Multi-layer geo-restriction implementation:
Documented jurisdictional coverage analysis:
What to Request from the Merchant
Testing Protocol
Merchant Assessment Checklist
Red Flag Thresholds
Why it matters
How a merchant generates revenue is the clearest indicator of whether the product's economic structure is consistent with the stated classification. A gaming merchant whose revenue comes primarily from advertising, flat-rate cosmetic purchases, or subscriptions that do not unlock prize-bearing mechanics presents a materially different risk profile from a merchant whose primary revenue comes from paid randomized loot box openings, entry fees to prize-bearing tournaments, or sweepstakes coin sales. The monetization model also determines whether the merchant has a structural incentive to increase user exposure to chance mechanics, which is itself a risk indicator.
Revenue generated primarily from paid chance mechanics:
Incentive structures that increase user exposure to chance:
Why this is high risk: A monetization model built primarily on paid chance mechanics, combined with prize and consideration elements, satisfies the gambling triad regardless of how the product is categorized in the merchant application.
Revenue diversified away from chance mechanics:
Transparent pricing for any chance mechanics:
What to Request from the Merchant
Testing Protocol
Merchant Assessment Checklist
Red Flag Thresholds
Merchant Category Code (MCC) assignment is the formal mechanism through which payment networks categorize merchants and apply applicable rules. For gaming-adjacent merchants, two MCCs are most relevant.
MCC 7994 covers video game arcades and entertainment establishments and is used for general gaming merchants.
MCC 7995 covers gambling transactions, including betting, casino gambling, lottery, and related activity. This MCC triggers specific requirements under Visa and Mastercard scheme rules, including enhanced due diligence, specific reserve requirements, prohibition on certain card types and in certain markets, and additional consumer protection obligations.
Classifying a merchant that functions as a gambling operator under MCC 7994 is a misclassification. The consequences include the merchant avoiding scheme-level gambling controls, the acquirer processing gambling transactions without the required scheme authorization, and the portfolio carrying concealed gambling exposure that is not visible to scheme monitoring programs.
From a Mastercard Merchant Monitoring Program (MMSP) perspective, MCC accuracy is a fundamental expectation. Acquirers and MMSP-certified monitoring providers are expected to identify merchants whose actual activity does not match their assigned MCC and to take corrective action. Ballerine's merchant underwriting workflows include automated MCC classification and risk mapping, generating contextual MCC assignments supported by documented evidence rather than relying on merchant-provided descriptions.
We see MCC misclassification in two primary patterns. The first is deliberate: a merchant that knows it would not qualify under MCC 7995 requirements (because it lacks the required license, or because the acquiring bank does not support gambling merchants) presents itself as a gaming company. The second is inadvertent: an underwriting team accepts a "gaming platform" description without reviewing the product mechanics and assigns MCC 7994 without performing the classification analysis.
Both patterns result in the same compliance exposure. The remediation path for identified misclassification typically involves reclassification, enhanced due diligence review, and in some cases termination if the merchant does not qualify under the corrected MCC.
A compliant gaming-adjacent merchant can be identified by a specific set of observable characteristics. The following profiles describe what compliance looks like across the four merchant types covered in this guide.
Compliant Skill Game Platform
The merchant provides a clear, written technical explanation of how game outcomes are determined, demonstrating that skill is the dominant factor. Jurisdiction-specific legal opinions confirming skill-dominance are available for each active market. Geo-restrictions from states where prize-for-skill competitions are legally uncertain are implemented at the technical level, with documentation. The entry fee and prize structure have been reviewed under each operational jurisdiction. Age verification is document-based or uses a third-party service, and the minimum age requirement is enforced at the technical level, not only in terms of service.
Compliant Loot Box Mechanic
The merchant discloses the probability of receiving each item type clearly and prominently before purchase. Geo-blocking for Belgian users of the paid mechanic is implemented and tested. The merchant complies with applicable consumer protection requirements in the Netherlands. Terms of service prohibit real-money secondary market activity for platform items, and the merchant monitors third-party platforms for secondary market activity. A response policy for secondary market activity is documented.
Compliant Sweepstakes Platform
The AMOE process is genuinely free, prominently disclosed, and no more complex than the paid path. Prize redemption mechanics are described clearly in terms of service, with all prizes accurately described. The platform actively restricts access from US states where sweepstakes of this type are not permitted, with technical controls verified. Marketing does not use casino-style language. Age verification is in place for prize redemption flows.
Compliant Social/Free-to-Play Platform
The platform does not offer paid randomized mechanics. Where loot-style mechanics exist, they are accessible only through earned in-game currency, not purchased currency. The platform's position on item tradability is documented, and clear terms prohibit real-money exchange. Where the platform is accessible to users under 18, COPPA and equivalent international compliance frameworks are implemented with technical age verification, not self-certification.
Accepting the merchant's framing
A merchant that describes itself as a "gaming company" is making a marketing statement, not a legal determination. The applicable regulatory frameworks evaluate mechanics, not labels. We consistently recommend that underwriting guidelines require mechanics documentation for any gaming merchant that involves paid entry to compete for prizes, randomized purchase mechanics, or any form of prize redeemability.
Single-jurisdiction analysis applied across multiple markets
Risk teams that apply a single-classification determination without examining jurisdictional coverage are leaving material exposure unaddressed. A skill game platform operating legally in the majority of US states but without restrictions in states where such competitions are regulated or prohibited is partially non-compliant. Partial non-compliance is not equivalent to low risk in scheme or regulatory reviews.
Treating the legal opinion as a permanent clearance
A legal opinion confirming skill-dominance or sweepstakes structure compliance is a point-in-time document covering the mechanics as described at the time it was obtained. If the merchant updates its game mechanics, adds a new revenue stream, changes its prize structure, or expands into new markets after the opinion was issued, it may no longer cover the current product. Ongoing monitoring of product evolution is necessary for this merchant category, not only at onboarding.
Missing secondary market indicators
For gaming merchants with tradeable virtual items, an active secondary market changes the risk profile. Risk teams that do not check whether secondary markets exist for a merchant's virtual items may be missing a material indicator that the prize element is present in practice, regardless of the merchant's formal position.
Inconsistency between marketing language and product terms
A merchant whose product terms describe the product as entertainment software but whose active marketing uses casino-style language ("jackpots", "win real prizes", "hit the reels") is presenting an inconsistency that is material to the classification analysis. Marketing language describes how the product is positioned to consumers, which is relevant both to regulatory classification and to consumer protection risk.
Insufficient monitoring of post-onboarding product changes
Product mechanics change. Monetization models evolve. A merchant onboarded as a cosmetic-only free-to-play game may introduce loot boxes later. A sweepstakes platform may reduce the accessibility of its AMOE over time. In our experience, gaming-adjacent merchants are among the categories where post-onboarding product drift most frequently changes the applicable compliance profile. Ongoing merchant monitoring that includes automated triggers for product changes, marketing updates, and mechanic evolution is the appropriate control for this risk. Periodic review of the live product, including payment flow, prize mechanics, and jurisdictional footprint, is standard practice for this category.
This section summarizes publicly documented regulatory positions. It does not constitute legal advice and does not substitute for jurisdiction-specific legal analysis.
United States. No federal statute directly classifies skill games or loot boxes as gambling. The Unlawful Internet Gambling Enforcement Act (UIGEA), 18 U.S.C. sections 5361-5367, prohibits payment processors from knowingly accepting payments for unlawful internet gambling, where unlawfulness is determined by applicable state law. Skill game treatment varies by state. Sweepstakes models are legally recognized where consideration is genuinely absent. Loot boxes are subject to state-level legal analysis but have not been classified as gambling at the federal level.
Belgium. The Belgian Gambling Commission ruled in 2018 that paid loot boxes in video games constitute gambling under Belgian law. Compliance requires blocking the paid loot box mechanic for Belgian users.
Netherlands. Following a 2022 court ruling, paid loot boxes offering in-game advancement are subject to compliance requirements under Dutch law. The regulatory framework has continued to develop. (Note: primary court ruling citation required for verification. Risk teams should verify current status directly via Dutch Kansspelautoriteit (KSA) guidance.)
United Kingdom. The UK Gambling Commission has stated publicly that loot boxes do not currently meet the legal definition of gambling under the Gambling Act 2005. The government has conducted reviews and issued guidance on age restrictions and spending disclosures. The regulatory position remains subject to legislative development. (Note: risk teams should verify the current position directly via published UK Gambling Commission guidance.)
European Union. There is no harmonized EU-level regulation specifically addressing loot boxes. Member states have adopted varying positions. Belgium and the Netherlands have taken the most restrictive positions documented to date.
Step 1: Mechanics Documentation
Obtain a written description of how game outcomes are determined. Identify whether the mechanic involves paid entry to compete for prizes, randomized purchase outcomes, or redeemable virtual currency or items. If any of these are present, proceed to a full three-element analysis.
Step 2: Three-Element Analysis
Consideration: Is payment or equivalent value required to access the prize-bearing mechanic? Chance: Is outcome determined by chance, skill, or both? Is a skill-dominance legal opinion available for each active jurisdiction? Prize: Are cash, cash-equivalent, or real-world-value items awarded to participants? If all three elements are present, treat the merchant as a potential gambling operator for underwriting purposes, regardless of its stated category.
Step 3: Jurisdictional Coverage
Identify which markets the merchant is actively serving. Map those markets against the applicable legal status for the identified mechanic. Verify geo-restriction controls at the technical level. Confirm licensing status in jurisdictions where the mechanic requires a license.
Step 4: Age Verification
Confirm the minimum age requirement. Verify the technical mechanism for age verification: self-certification, document verification, or third-party service. For products accessible to minors, confirm COPPA (US) and equivalent international compliance.
Step 5: MCC Assignment
Based on the three-element analysis and jurisdictional assessment, determine the applicable MCC. If MCC 7995 applies, confirm that the program supports gambling merchant processing and that applicable scheme requirements are met. Document the classification rationale.
Step 6: Ongoing Monitoring Triggers
Set review triggers for: product updates; new jurisdiction launches; changes to prize mechanics or monetization model; marketing material changes; and secondary market activity for platform items.
The classification of gaming-adjacent merchants is not a single underwriting decision. It is a recurring analysis that must account for product evolution, jurisdictional change, and monetization drift. A merchant that was correctly classified as a gaming operator at onboarding may cross the classification threshold after introducing a paid randomized mechanic or expanding into a market with different regulatory standards.
Risk teams that maintain an explicit, documented trigger for three-element classification review, and that apply that trigger consistently across underwriting and monitoring workflows, are in a materially better position to identify exposure before it becomes a portfolio liability. That consistency also produces the kind of auditable evidence trail that supports defensible decisions in scheme inquiries and regulatory examinations.
The mechanic determines the obligation. The obligation determines the due diligence. Starting from the mechanic, rather than from the merchant's category description, is the correct order of operations.
Ballerine builds AI-powered merchant underwriting, KYB (Know Your Business) and KYC (Know Your Customer), and ongoing monitoring infrastructure for payment companies: acquirers, PSPs (payment service providers), PayFacs, marketplaces, BIN sponsors, and banks.
Our merchant underwriting platform supports risk and compliance teams in evaluating high-risk and complex merchant categories, including gambling, gaming-adjacent products, crypto, adult content, and related verticals. The platform provides structured evidence collection, configurable risk rules, and auditable decision workflows designed to support both internal governance and external defensibility. Trained high-risk expert agents analyze not only what a merchant sells but how it sells it, identifying red flags specific to each vertical.
Ballerine is Mastercard MMSP (Mastercard Monitoring Service Provider) certified. Our outputs are designed to meet the evidence and documentation standards that Mastercard expects from merchant monitoring programs. Details on our Mastercard MMSP compliance capabilities are available on our solutions page. Risk teams using the platform can document classification decisions, capture product mechanic evidence, track jurisdictional licensing status, and monitor post-onboarding product changes within a single workflow.
For acquirers and PayFacs managing gaming-adjacent portfolio exposure, our ongoing merchant monitoring capabilities include automated review triggers for product changes, marketing updates, and secondary market signals that indicate post-onboarding product drift.
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.png)
