Media, telecom & entertainment

Gaming & esports. Play is now regulated by what is at stake.

The game has to prove it is a game.

Studios, publishers, esports teams and leagues, platforms and the communities around them, where the law now draws a hard line between play and stakes, and between players and children. We design sign-up, store, community and tournament experiences that keep games on the right side of that line, with honest pricing, real age assurance and moderation people trust.

The number we move
Day-30 player retention
Where we work in gaming & esports
  • Studios & publishers
  • Esports teams & leagues
  • Mobile & casual games
  • Platforms & communities
  • Streaming & creators
  • Peripherals & hardware
Rules mapped
8 rules · 4 areas
Disciplines that lead
TechnologyProduct
Frameworks we build to
DPDP Act 2023 — Digital Personal Data Protection Act, 2023GDPR — General Data Protection Regulation (EU) 2016/679PCI DSS v4.0.1 — Payment Card Industry Data Security StandardOWASP Top 10 for LLM Applications — LLM and generative AI security risksWCAG 2.2 AA — Web Content Accessibility Guidelines
A spectator in a headset, seen from behind in silhouette, watches a bright screen at a live event
Gaming & esportsEsports earned its place as sport; money games lost theirs.

Where the rules biteMap of all forty-one industries

  • Claims Advertising & claims: Shapes most of the work
  • Regulator Sector regulator: Shapes most of the work
  • Payments Payments: Often shapes the work
  • Data Personal data: Shapes most of the work
  • Security Security & incidents: Often shapes the work
  • Access Accessibility: Sometimes shapes the work
  • AI AI governance: Often shapes the work

What is shifting

Money games are out, esports and social games are in.

India banned online money games and their advertising, recognised esports, and tightened duties on children’s data; Europe set principles for in-game currencies. Each shift names what it demands, with a fact you can check.

A game controller in deep shadow lit by teal light, with a keyboard glowing behind it
The line between play and stakes is now drawn in law.
  1. Money games are out, whatever the skill involved.

    It demandsGame economies and tournaments designed without stakes, from entry fees to rewards.

    SignalThe Promotion and Regulation of Online Gaming Act, 2025 bans games played for money or other stakes — virtual coins bought with money included — and their advertising.

  2. Esports gained recognition as sport.

    It demandsTournaments, teams and broadcasts organised so they can be recognised and registered.

    SignalUnder the 2025 Act, an e-sport is recognised under the National Sports Governance Act, 2025, registered with the gaming Authority, and involves no betting.

  3. Virtual currencies are read as real prices.

    It demandsStores that show the real-money price of every item and never force bulk currency.

    SignalOn 21 March 2025, the EU’s consumer-protection authorities published key principles requiring in-game prices to be shown in real money.

  4. Children’s data needs a parent’s yes and no targeting.

    It demandsAge assurance, parental consent and child-safe defaults built into sign-up and play.

    SignalThe DPDP Act requires verifiable parental consent for anyone under 18 and bars tracking, behavioural monitoring and targeted advertising directed at children.

The rulebook

No stakes, real prices, and children kept safe.

The online-gaming law, the IT Rules, the dark-pattern guidelines, the data law and Europe’s consumer principles for games, read for a studio or a platform. Your legal team keeps sign-off.

Frameworks we build to

  • DPDP Act 2023 — Digital Personal Data Protection Act, 2023
  • GDPR — General Data Protection Regulation (EU) 2016/679
  • PCI DSS v4.0.1 — Payment Card Industry Data Security Standard
  • OWASP Top 10 for LLM Applications — LLM and generative AI security risks
  • WCAG 2.2 AA — Web Content Accessibility Guidelines

Frameworks we design and build to — not a claim of certification.

Advertising & claims

Shapes most of the work

  1. Central Consumer Protection Authority

    CCPA dark-patterns guidelines, 2023

    Advertising a game as free without saying that continued play needs in-app purchases is drip pricing; nagging, false urgency and subscription traps are named too.

    We designStore, pass and offer screens are audited against all thirteen patterns before each season.

    CCPA · Guidelines for Prevention and Regulation of Dark Patterns, 30 November 2023 Official text: CCPA dark-patterns guidelines, 2023

  2. EU Consumer Protection Cooperation Network

    EU principles on in-game virtual currencies

    In-game prices shown in real money, no forced bulk purchases of currency, clear information before purchase, and design that respects children’s vulnerability.

    We designStores show the real-money price of every item and sell currency in amounts players actually need.

    CPC Network · Key principles on in-game virtual currencies, 21 March 2025 Official text: EU principles on in-game virtual currencies

  3. Advertising Standards Council of India

    ASCI guidelines for influencer advertising

    Creators and streamers disclose any material connection with a publisher — payment, free items or other benefits — clearly on the stream or post.

    We designCreator programmes carry the disclosure label in every brief and overlay.

    ASCI · Guidelines for Influencer Advertising in Digital Media Official text: ASCI guidelines for influencer advertising

Sector regulator

Shapes most of the work

  1. Ministry of Electronics and IT

    Promotion and Regulation of Online Gaming Act, 2025

    Bans offering, advertising and funding online money games — skill or chance, played for money or other stakes — with penalties of up to three years and ₹1 crore; e-sports and online social games are recognised and promoted.

    We designEconomies, entry fees and rewards are designed and documented so the game stays clear of stakes.

    Promotion and Regulation of Online Gaming Act, 2025 (Act 32 of 2025, assent 22 August 2025) · sections 2 to 9 Official text: Promotion and Regulation of Online Gaming Act, 2025

  2. Ministry of Electronics and IT

    Promotion and Regulation of Online Gaming Rules, 2026

    E-sports are registered with the Online Gaming Authority of India; asking whether a game is a money game is largely voluntary, and complaints run from the provider to the Authority and then on appeal.

    We designTournaments are prepared for registration, and the complaints route is designed into the game.

    Promotion and Regulation of Online Gaming Rules, 2026 (reported in force from 1 May 2026)

  3. Ministry of Electronics and IT

    IT Rules, 2021, as amended

    Platforms publish their rules and a grievance officer, act on complaints within set timelines, remove unlawful content within three hours of a lawful order, and label synthetic media.

    We designReporting, appeals and labelling are built into the community from launch.

    IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 · amendments to 10 February 2026 Official text: IT Rules, 2021, as amended

Payments

Often shapes the work

  1. PCI Security Standards Council

    PCI DSS v4.0.1

    Card data protection for stores, passes and subscriptions, including the requirements on payment-page scripts in force since 31 March 2025.

    We designPayment pages ship with a script inventory and change detection.

    PCI SSC · PCI DSS v4.0.1 Official text: PCI DSS v4.0.1

Personal data

Shapes most of the work

  1. Ministry of Electronics and IT

    DPDP Act, 2023 — children’s data

    Verifiable parental consent before processing the data of anyone under 18; no processing that harms a child’s well-being, and no tracking, behavioural monitoring or targeted advertising directed at children.

    We designSign-up recognises minors and switches to parental consent, child-safe defaults and untargeted play.

    DPDP Act, 2023 · section 9 · DPDP Rules, 2025 (core obligations from 13 May 2027) Official text: DPDP Act, 2023 — children’s data

Compiled 3 October 2026. Our reading of typical programmes, not legal advice. Rules change; your counsel confirms how each one applies to you.

Challenges

What gets in the way in gaming & esports.

The problems that surface in nearly every gaming & esports programme: the ones customers feel, and the ones teams carry.

Your customers

  1. Fair play, fair prices

    Prices shown in real money, and progress that does not depend on paying more.

  2. A safe community

    Chat, voice and creator spaces free of harassment and scams.

  3. Quick sign-up, real age checks

    Getting into a game fast without letting children skip the protections meant for them.

Lines of colourful code on a dark screen
Age checks, spending limits and reports all run on code.

Your operation

  1. A hard legal line

    Every reward, entry fee and partner deal has to stay clear of stakes.

  2. Moderation at scale

    Millions of messages, reports and appeals across languages and time zones.

  3. Live operations without dark patterns

    Events, offers and passes designed to engage, not to pressure.

What we build

What we build for gaming & esports, discipline by discipline.

A typical programme here draws on each discipline in this mix. Every line names what it builds for the industry and links to the capability that does the work.

Leads Core Supports Share of a typical programme, by role · illustrative
  1. Platforms, moderation tooling, payments and data built to hold under live-ops peaks.

  2. Sign-up, store, community and tournament experiences designed for fair play and real age assurance.

  3. Launches, creator programmes and tournament broadcasts with every partnership disclosed.

  4. 04

    AI Design

    Core

    Moderation and player-support assistants with evaluations, appeals and people deciding sanctions.

  5. Player lifecycle and live-ops messaging on one consented record, with children kept out of targeting.

  6. 06

    Brand Design

    Supports

    Studio, team and league identities that work on a jersey, a stream overlay and an app icon.

Programmes

Audit the store and the sign-up first, then grow the community.

The way in walks sign-up, the store and the community the way players do, and checks each step against the gaming, consumer and data rules. Lengths are typical, never promised.

The way in

Store, sign-up and stakes audit

We sign up, buy, compete and report the way players do, and check every step against the online-gaming law, the dark-pattern rules and the children’s-data duties.

Package
Sprint · Fixed fee
Typical length
2–3 weeks
It sets
Day-30 player retention, as a baseline
  • Product experience audit
  • Compliance readiness

What it hands over

  • A stakes and pricing risk register, item by item
  • A child-safe sign-up and consent design
  • A fix list ranked by player harm and by legal risk
Start here
  1. 02Project · 8–12 weeks

    Fair store and economy design

    A store and economy that show real-money prices, avoid forced bulk purchases and keep progress fair, tested with players.

    MovesRefunds and chargebacks per 1,000 purchases

    Services: End-to-end UX & UI design · User research & usability testing

    Enquire about Fair store and economy design
  2. 03Milestone · 4–9 months

    Trust and safety platform

    Reporting, moderation queues, appeals and transparency reporting, with AI triage and people deciding sanctions.

    MovesReports resolved within the target time

    Services: Custom CRM or operations platform · Custom AI agent or copilot · AI assistant experience design

    Enquire about Trust and safety platform
  3. 04Project · 8–12 weeks

    Esports league and broadcast identity

    Identity, overlays and fan journeys for a tournament or league, with sponsorships that fit the new law.

    MovesViewer-to-registered-fan conversion

    Services: Logo & identity system · Motion & sonic identity · Campaign platform & big idea

    Enquire about Esports league and broadcast identity

How success is measured

The number we moveDay-30 player retention

  • Day-30 player retention
  • Reports resolved within the target time
  • Verified parental consents for under-18 accounts
  • Refunds and chargebacks per 1,000 purchases

AI, under the rules

AI moderates and assists, people decide every sanction.

Each use case has an owner, an evaluation set and a log; no model targets a child or bans a player on its own.

Use case 01

Moderation triage

Measured byReports resolved within the target time

Tested forOWASP LLM06 · Excessive agency

agent / moderation-triage Guarded
  1. TaskScores chat, voice transcripts and reports for harassment, scams and child-safety risk, and queues them for review.
  2. GuardrailTriage only; it never bans, mutes or reports a player on its own, and child-safety flags are escalated at once.
  3. HumanTrained moderators decide every sanction and every appeal.
  4. LogContent, score, model version and the moderator’s decision.

Ships only with its evaluation set, its guardrail and an owner

Use case 02

Player-support assistant

Measured byTickets resolved without an agent

Tested forOWASP LLM01 · Prompt injection

agent / player-support-assistant Guarded
  1. TaskAnswers account, purchase and gameplay questions from the player’s record and the published policy.
  2. GuardrailNever promises refunds or items, cannot be talked into granting currency, and sends purchase disputes to a person.
  3. HumanThe support team reviews flagged conversations daily.
  4. LogQuestions, policy cited and hand-offs.

Ships only with its evaluation set, its guardrail and an owner

Use case 03

Localised patch notes and store copy

Measured byRelease notes approved first time

Tested forOWASP LLM09 · Misinformation

agent / localised-patch-notes-and-store-copy Guarded
  1. TaskDrafts patch notes and store descriptions in each language from the approved changelog.
  2. GuardrailStates prices in real money and adds no claim the changelog does not support.
  3. HumanThe live-ops lead approves every release note.
  4. LogChangelog version, drafts and approver.

Ships only with its evaluation set, its guardrail and an owner

Work and insights

Published work follows client approval.

We publish gaming & esports projects only once a client signs off the write-up. Meanwhile, here is the reading that applies.

A typical programme · composite

A mobile studio rebuilt its store and sign-up so every item shows its real-money price, under-18 players move to a parental-consent flow with child-safe defaults, and tournament rewards carry no stakes.

Anonymised and illustrative: the shape a programme takes, never a named client.

Questions

What studio, platform and community heads ask us first.

Something else on your mind? Ask us directly

Q.01Does the online-gaming law affect a game with in-app purchases?

It can. The Act bans games played for money or other stakes — including virtual coins bought with money — in the expectation of winning money or other enrichment. A game offered for entertainment, even for a subscription or one-time fee, can be an online social game, provided no payment is a stake or wager. Where your design sits is for your counsel; we design economies that stay clear of stakes.

Q.02How should we handle players under 18?

With age assurance at sign-up, verifiable parental consent, child-safe defaults and no tracking or targeted advertising directed at children, and with parents able to see and limit spending.

Q.03Can you run moderation with AI?

AI can triage at the scale games need, but trained moderators decide every sanction and appeal. We build the queues, evaluations and transparency reporting around that.

Q.04Do you work with esports teams and leagues?

Yes: identities, broadcast overlays, fan journeys and sponsorship formats for teams, leagues and tournament organisers, designed for recognition under the 2025 law and with no betting involved.

Let’s build what happens next.

Tell us what you’re building. We’ll answer straight.

Book a discovery call

Three ways to start

  1. 01About 2 minutes

    A quick question

    You get A reply from a lead, not a sales queue

  2. 02About 8 minutesMost useful

    A project brief

    You get Options and a first scope after one call

  3. 03About 15 minutes

    A formal RFQ or RFP

    You get Receipt confirmed and a named bid lead

Every engagement starts with a written scope and a quote agreed before work begins. How each package is priced