Media, telecom & entertainment

Gaming & esports. Stores, sign-up and communities built to the law.

Money games are banned; children’s data needs a parent’s consent.

We design fair stores, child-safe sign-up, communities and tournaments for studios, publishers, esports teams, leagues and platforms. AI sorts reports and answers player questions; trained moderators decide every sanction.

Main measure
Day-30 player retention
Where we work in gaming & esports
  • Studios & publishers
  • Esports teams & leagues
  • Mobile & casual games
  • Platforms & communities
  • Streaming & creators
  • Peripherals & hardware
Rules mapped
8 rules · 4 areas
Disciplines that lead
TechnologyProduct
Frameworks we build to
DPDP Act 2023 — Digital Personal Data Protection Act, 2023GDPR — General Data Protection Regulation (EU) 2016/679PCI DSS v4.0.1 — Payment Card Industry Data Security StandardOWASP Top 10 for LLM Applications — Security risks in generative AI applicationsWCAG 2.2 AA — Web Content Accessibility Guidelines
A spectator in a headset, seen from behind in silhouette, watches a bright screen at a live event
Gaming & esportsEsports earned its place as sport; money games lost theirs.

Where the rules biteMap of all forty-one industries

  • Claims Advertising & claims: Shapes most of the work
  • Regulator Sector regulator: Shapes most of the work
  • Payments Payments: Often shapes the work
  • Data Personal data: Shapes most of the work
  • Security Security & incidents: Often shapes the work
  • Access Accessibility: Sometimes shapes the work
  • AI AI governance: Often shapes the work

What is shifting

What changed for games, and what each change demands.

India banned online money games and their advertising, recognised esports and tightened duties on children’s data. Europe set principles for in-game currencies. Each change below comes with a fact you can check.

A game controller in deep shadow lit by teal light, with a keyboard glowing behind it
The line between play and stakes is now drawn in law.
  1. Money games are banned, whether of skill or chance.

    What it requiresGame economies and tournaments designed without stakes, from entry fees to rewards.

    EvidenceThe Promotion and Regulation of Online Gaming Act, 2025 bans games played for money or other stakes, including virtual coins bought with money, and their advertising.

  2. Esports gained recognition as sport.

    What it requiresTournaments, teams and broadcasts organised so they can be recognised and registered.

    EvidenceUnder the 2025 Act, an e-sport involves no betting, is recognised under the National Sports Governance Act, 2025 and is registered with the gaming Authority.

  3. In-game prices are now expected in real money.

    What it requiresStores that show every item’s real-money price and never force bulk currency purchases.

    EvidenceOn 21 March 2025, the EU’s consumer-protection authorities published key principles requiring in-game prices to be shown in real money.

  4. Children’s data needs parental consent and no targeting.

    What it requiresAge assurance, parental consent and child-safe defaults built into sign-up and play.

    EvidenceThe DPDP Act requires verifiable parental consent for anyone under 18 and bars tracking, behavioural monitoring and targeted advertising directed at children.

The rulebook

Online gaming rules, from stakes to children’s data.

The online-gaming law, the IT Rules, the dark-pattern guidelines, the data law and Europe’s consumer principles for games, read for a studio or a platform. Your legal team keeps sign-off.

Frameworks we build to

  • DPDP Act 2023 — Digital Personal Data Protection Act, 2023
  • GDPR — General Data Protection Regulation (EU) 2016/679
  • PCI DSS v4.0.1 — Payment Card Industry Data Security Standard
  • OWASP Top 10 for LLM Applications — Security risks in generative AI applications
  • WCAG 2.2 AA — Web Content Accessibility Guidelines

We design and build to these frameworks; this is not a claim of certification.

Advertising & claims

Shapes most of the work

  1. Central Consumer Protection Authority

    CCPA dark-patterns guidelines, 2023

    Advertising a game as free without saying that continued play needs in-app purchases is drip pricing; nagging, false urgency and subscription traps are named too.

    We designStore, pass and offer screens are audited against all thirteen patterns before each season.

    CCPA · Guidelines for Prevention and Regulation of Dark Patterns, 30 November 2023 Official text: CCPA dark-patterns guidelines, 2023

  2. EU Consumer Protection Cooperation Network

    EU principles on in-game virtual currencies

    In-game prices shown in real money, no forced bulk purchases of currency, clear information before purchase and design that respects children’s vulnerability.

    We designStores show the real-money price of every item and sell currency in the amounts players need.

    CPC Network · Key principles on in-game virtual currencies, 21 March 2025 Official text: EU principles on in-game virtual currencies

  3. Advertising Standards Council of India

    ASCI guidelines for influencer advertising

    Creators and streamers clearly disclose any material connection with a publisher, such as payment, free items or other benefits, on the stream or post.

    We designCreator programmes carry the disclosure label in every brief and overlay.

    ASCI · Guidelines for Influencer Advertising in Digital Media Official text: ASCI guidelines for influencer advertising

Sector regulator

Shapes most of the work

  1. Ministry of Electronics and IT

    Promotion and Regulation of Online Gaming Act, 2025

    Bans offering, advertising and funding online money games (of skill or chance, played for money or other stakes), with penalties of up to three years and ₹1 crore; e-sports and online social games are recognised and promoted.

    We designEconomies, entry fees and rewards are designed and documented so the game stays clear of stakes.

    Promotion and Regulation of Online Gaming Act, 2025 (Act 32 of 2025, assent 22 August 2025) · sections 2 to 9 Official text: Promotion and Regulation of Online Gaming Act, 2025

  2. Ministry of Electronics and IT

    Promotion and Regulation of Online Gaming Rules, 2026

    E-sports are registered with the Online Gaming Authority of India; asking whether a game is a money game is largely voluntary, and complaints run from the provider to the Authority and then on appeal.

    We designTournaments are prepared for registration, and the complaints route is designed into the game.

    Promotion and Regulation of Online Gaming Rules, 2026 (reported in force from 1 May 2026)

  3. Ministry of Electronics and IT

    IT Rules, 2021, as amended

    Platforms publish their rules and a grievance officer, act on complaints within set timelines, remove unlawful content within three hours of a lawful order and label synthetic media.

    We designReporting, appeals and labelling are built into the community from launch.

    IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 · amendments to 10 February 2026 Official text: IT Rules, 2021, as amended

Payments

Often shapes the work

  1. PCI Security Standards Council

    PCI DSS v4.0.1

    Card data protection for stores, passes and subscriptions, including the requirements on payment-page scripts in force since 31 March 2025.

    We designPayment pages go live with a script inventory and change detection.

    PCI SSC · PCI DSS v4.0.1 Official text: PCI DSS v4.0.1

Personal data

Shapes most of the work

  1. Ministry of Electronics and IT

    DPDP Act, 2023 — children’s data

    Verifiable parental consent before processing the data of anyone under 18; no processing that harms a child’s well-being, and no tracking, behavioural monitoring or targeted advertising directed at children.

    We designSign-up recognises minors and switches to parental consent, child-safe defaults and untargeted play.

    DPDP Act, 2023 · section 9 · DPDP Rules, 2025 (core obligations from 13 May 2027) Official text: DPDP Act, 2023 — children’s data

Compiled 3 October 2026. Our reading of typical programmes, not legal advice. Rules change; your counsel confirms how each one applies to you.

Challenges

What gets in the way in gaming & esports.

The problems that come up in most gaming & esports programmes, for customers and for your teams.

Your customers

  1. Fair play, fair prices

    Prices shown in real money, and progress that does not depend on paying more.

  2. A safe community

    Chat, voice and creator spaces free of harassment and scams.

  3. Fast sign-up with age checks

    Getting into a game fast without letting children skip the protections meant for them.

Lines of colourful code on a dark screen
Age checks, spending limits and reports all run on code.

Your operation

  1. A hard legal line

    Every reward, entry fee and partner deal has to stay clear of stakes.

  2. Moderation load

    Large volumes of messages, reports and appeals across languages and time zones.

  3. Live operations without dark patterns

    Events, offers and passes that engage players without pressure.

What we build

What we build for gaming & esports, discipline by discipline.

A typical programme here uses each discipline in this mix. Each line says what it builds for the industry and links to the capability behind it.

Leads Core Supports Share of a typical programme, by role · illustrative
  1. Platforms, moderation tooling, payments and data built to hold under live-ops peaks.

  2. Sign-up, store, community and tournament experiences with fair prices and age assurance built in.

  3. Launches, creator programmes and tournament broadcasts with every partnership disclosed.

  4. 04

    AI Design

    Core

    Moderation and player-support assistants with evaluation sets, appeals and moderators deciding sanctions.

  5. Player lifecycle and live-ops messaging on one consented record, with children kept out of targeting.

  6. 06

    Brand Design

    Supports

    Studio, team and league identities that work on a jersey, a stream overlay and an app icon.

Programmes

Audit the store and the sign-up first, then grow the community.

The way in goes through sign-up, the store and the community as players do, and checks each step against the gaming, consumer and data rules. Lengths are typical, never promised.

The way in

Store, sign-up and stakes audit

We sign up, buy, compete and report as players do, and check each step against the gaming law, dark-pattern rules and children’s-data duties.

Package
Sprint · Fixed fee
Typical length
2–3 weeks
It sets
Day-30 player retention, as a baseline
  • Product experience audit
  • Compliance readiness

What you get

  • A stakes and pricing risk register, item by item
  • A child-safe sign-up and consent design
  • A fix list ranked by player harm and by legal risk
Start here
  1. 02Project · 8–12 weeks

    Fair store and economy design

    A store and economy that show real-money prices, avoid forced bulk purchases and keep progress fair, tested with players.

    MeasureRefunds and chargebacks per 1,000 purchases

    Services: Complete UX & UI design · User research & usability testing

    Enquire about Fair store and economy design
  2. 03Milestone · 4–9 months

    Trust and safety platform

    Player reporting, moderation queues, appeals and transparency reports, with AI triage and moderators deciding every sanction.

    MeasureReports resolved within the target time

    Services: Custom CRM or operations platform · Custom AI agent or copilot · AI assistant experience design

    Enquire about Trust and safety platform
  3. 04Project · 8–12 weeks

    Esports league and broadcast identity

    Identity, overlays and fan journeys for a tournament or league, with sponsorships that fit the new law.

    MeasureViewer-to-registered-fan conversion

    Services: Logo & identity system · Motion & sonic identity · Campaign platform & big idea

    Enquire about Esports league and broadcast identity

How success is measured

Main measureDay-30 player retention

  • Day-30 player retention
  • Reports resolved within the target time
  • Verified parental consents for under-18 accounts
  • Refunds and chargebacks per 1,000 purchases

AI, under the rules

AI triages and assists; moderators decide every sanction.

Each use case has an owner, an evaluation set and a log; no model targets a child or bans a player on its own.

Use case 01

Moderation triage

Measured byReports resolved within the target time

Tested forOWASP LLM06 · Excessive agency

agent / moderation-triage Guarded
  1. TaskScores chat, voice transcripts and reports for harassment, scams and child-safety risk, and queues them for review.
  2. CheckTriage only; it never bans, mutes or reports a player on its own, and child-safety flags are escalated at once.
  3. ApproverTrained moderators decide every sanction and every appeal.
  4. LogContent, score, model version and the moderator’s decision.

Goes live only with its evaluation set, automatic checks and a named owner

Use case 02

Player-support assistant

Measured byTickets resolved without a hand-off

Tested forOWASP LLM01 · Prompt injection

agent / player-support-assistant Guarded
  1. TaskAnswers account, purchase and gameplay questions from the player’s record and the published policy.
  2. CheckCannot promise refunds or items, or be talked into granting currency; purchase disputes go to a person.
  3. ApproverThe support team reviews flagged conversations daily.
  4. LogQuestions, policy cited and hand-offs.

Goes live only with its evaluation set, automatic checks and a named owner

Use case 03

Localised patch notes and store copy

Measured byRelease notes approved first time

Tested forOWASP LLM09 · Misinformation

agent / localised-patch-notes-and-store-copy Guarded
  1. TaskDrafts patch notes and store descriptions in each language from the approved changelog.
  2. CheckStates prices in real money and adds no claim the changelog does not support.
  3. ApproverThe live-ops lead approves every release note.
  4. LogChangelog version, drafts and approver.

Goes live only with its evaluation set, automatic checks and a named owner

Work and insights

Published work follows client approval.

We publish gaming & esports projects only once a client signs off the write-up. Meanwhile, here is the reading that applies.

A typical programme · composite

A mobile studio rebuilt its store and sign-up. Every item shows its real-money price, tournament rewards carry no stakes and under-18 players get a parental-consent flow with child-safe defaults.

Anonymised and illustrative: the shape a programme takes, never a named client.

Questions

What studio, platform and community heads ask us first.

Something else on your mind? Ask us directly

Q.01Does the online-gaming law affect a game with in-app purchases?

It can. The Act bans games played for money or other stakes, including virtual coins bought with money, in the hope of winning money or other enrichment. A game sold for entertainment, even by subscription or one-time fee, can be an online social game if no payment is a stake or wager. Your counsel decides where your game sits; we design economies clear of stakes.

Q.02How should we handle players under 18?

Check age at sign-up and get verifiable parental consent for anyone under 18. Set child-safe defaults with no tracking or targeted advertising for children, and let parents see and limit spending.

Q.03Can you run moderation with AI?

Partly. AI can sort chat, voice and reports for review, but trained moderators decide every sanction and appeal. We build the queues, evaluation sets and transparency reports they work with.

Q.04Do you work with esports teams and leagues?

Yes. We design identities, broadcast overlays, fan journeys and sponsorship formats for teams, leagues and tournament organisers, planned for recognition under the 2025 Act and with no betting involved.

Tell us what you need built.

You will speak to a lead who would run the work, and get a straight answer on fit.

Book a call

Three ways to start

  1. 01About 2 minutes

    A quick question

    You get A reply from a named lead

  2. 02About 8 minutesRecommended

    A project brief

    You get Options and a first scope after one call

  3. 03About 15 minutes

    A formal RFQ or RFP

    You get Receipt confirmed and a named bid lead

Every engagement starts with a written scope and a quote agreed before work begins. How each package is priced