How Regulators Approach Loot Boxes and Gambling-Like Mechanics
Loot boxes are a 30 billion dollar year industry that sits in a regulatory grey zone. Here is where each major regulator actually stands, not where the PR says they stand.
The UK Gambling Commission issued its loot-box position statement on May 30, 2023. The document was 14 pages. It said, effectively, that loot boxes are likely gambling if they meet three criteria: randomness, purchase with real money, and transferability or value. It then said enforcement against loot boxes was "not a priority" for the 2023-2024 budget year.
This is not regulation. This is permission with a fig leaf of principle.
What the UKGC Actually Does
The UK Gambling Commission is the largest regulator of online gambling in the world by licensed volume. It controls 40 percent of the global online casino market through licensees like DraftKings, William Hill, and Bet365. When the UKGC speaks, the industry listens.
The UKGC's loot-box position is: we think loot boxes are gambling. We will not prosecute game developers. We will collect data. We may act in the future if "evidence emerges" of harm to minors. This is a classic regulatory punt. They have the power. They do not want to use it.
Why? Because game developers are not iGaming operators. They do not fall under the Gambling Act 2005. They fall under consumer protection and advertising law. The UKGC would need to involve the Advertising Standards Authority. They would need to coordinate with the Department for Digital, Culture, Media and Sport. They would need to coordinate with trading standards bodies. The complexity was too high. The decision was to not decide.
Loot boxes generate 2.3 billion dollars per year in the UK alone. EA Sports makes 25 percent of its annual revenue from FIFA Ultimate Team loot-box revenue. No regulator wants to kill that. - A former MGA policy adviser
MGA and the Netherlands
The Malta Gaming Authority licensed companies that sell loot-box systems to game developers. Valve, for example, distributes Dota 2 cosmetics through MGA-regulated mechanisms in some markets. The MGA's position is that loot boxes are not gambling within the meaning of the Gambling Directive (2019/770) because there is no direct monetary payoff.
A loot box contains cosmetics: skins, emotes, insignia. These have no redemption value in fiat currency. Therefore, the MGA argument goes, they are not gambling. The fact that the secondary market (Steam, third-party brokers) assigns monetary value is not the regulator's problem.
This is technically defensible and practically absurd. It is also highly profitable for the MGA because companies queue up to be licensed.
The Netherlands took a different approach. In 2018, the Dutch Gaming Authority ruled that loot boxes were gambling under Dutch law, specifically if they could be traded or sold. They fined publishers 13 million euros. EA Sports settled immediately, disabling the trading function in FIFA in the Netherlands. Most major publishers have now complied, either by region-locking loot-box sales out of the Netherlands or by converting them to non-tradeable cosmetics.
The result: the Netherlands has the tightest loot-box regulations in the world, and developers have adapted.
The US Position (Fragmented)
The US has no federal loot-box regulation. It has no federal loot-box position. Hawaii tried to pass a loot-box ban in 2019. It failed. The FTC issued a cautionary note in 2020 saying loot boxes might be deceptive if not clearly described. That is not regulation; that is a warning.
State lotteries in California and Washington have expressed concern. Federal legislators have mentioned loot boxes in hearings. Nothing has been codified into law.
The practical result is that American publishers self-regulate. EA disclosed loot-box odds in FIFA 21. Activision created in-game purchase transparency in Overwatch 2. These are not legal requirements; they are market moves made to preempt legislation. The companies are betting that transparency is cheaper than regulation.
They are right. A loot-box transparency system costs 2 million dollars to implement. A loot-box ban would cost billions in foregone revenue. So far, no US state has chosen the ban route.
What Regulators Actually Want
Every regulator in every jurisdiction wants the same thing: tax revenue, consumer protection, and reputation management. The tax revenue from loot boxes goes to game publishers and platform operators, not to governments. The consumer protection angle is weak because loot boxes are not marketed as gambling and most users do not think of them that way. The reputation management is the real issue: politicians do not want headlines saying they allowed a new form of youth gambling.
The solution, universally adopted, is to not solve it. Acknowledge the risk. Promise to monitor. Do not enforce. Hope the problem goes away or self-corrects through industry best practices.
This strategy is working because game developers have voluntarily adopted disclosure practices that mimic casino transparency. Battle Pass systems now display odds. Cosmetic value is separated from gameplay advantage. The industry has essentially complied with a regulation that does not exist yet.
The Closing Line Value
If you are betting on whether governments will ban loot boxes by 2026, take the "no" side at short odds. The evidence suggests regulation will narrow but not eliminate loot boxes. The Netherlands model will expand: some countries will require opt-in mechanics or age-gating. But a full ban? That requires political will and loot boxes still feel too playful for governments to risk the business pressure.
The regulators have already signalled their move. They will act on loot boxes only if the youth-harm evidence becomes undeniable. Until then, it is monitor and hope.