Consumer Protection & Gaming NFTs

1. Global Landscape: Consumer Protection Models for Gaming NFTs

The intersection of NFTs, gaming, and consumer protection represents one of the most complex regulatory frontiers in digital asset law. Across the 20 jurisdictions surveyed, regulators have adopted five broad approaches to governing gaming NFTs and protecting consumers: (a) application of general consumer protection law, (b) gaming-specific regulation targeting loot boxes and randomised rewards, (c) gambling classification, prohibition, or statutory bans on paid random-reward mechanics, (d) dedicated gaming NFT frameworks, and (e) silence -- no published rule at all. No single jurisdiction has adopted every approach simultaneously, and the global landscape remains highly fragmented. Of the 20 jurisdictions, only 2 mandate probability disclosure by statute (Japan, South Korea), only 1 has a purpose-built gaming-NFT regime (France's JONUM), 3 have enacted statutory bans that reach paid random-reward or money-game mechanics (Brazil, India, plus EU member-state bans in Belgium and the Netherlands), and 9 have no published loot-box or gaming-NFT rule at all (Canada, Hong Kong, Singapore, Germany, Liechtenstein, Switzerland, Bahrain, the UAE, and -- structurally -- Thailand, where NFTs are excluded from regulated venues entirely).

1.1 General Consumer Law Application

Every jurisdiction examined applies baseline consumer protection principles to NFT transactions: prohibitions on misleading or deceptive conduct, unfair contract terms, and false advertising. The key instruments are:

• US: FTC Act Section 5 (unfair or deceptive acts or practices); state consumer protection statutes (e.g., New York General Business Law)
• EU: Unfair Commercial Practices Directive (UCPD, 2005/29/EC); Consumer Rights Directive (2011/83/EU); Digital Content Directive (2019/770)
• UK: Consumer Rights Act 2015 (digital content provisions); Consumer Protection from Unfair Trading Regulations 2008
• Japan: Act on Specified Commercial Transactions (ASCT); Consumer Contract Act; Act against Unjustifiable Premiums and Misleading Representations (Premiums Act)
• South Korea: Electronic Commerce Act (amended 2025 to prohibit "dark patterns"); Korea Fair Trade Commission enforcement
• Australia: Australian Consumer Law (ACL), Sections 18 (misleading conduct) and 29 (false representations)
• Brazil: Consumer Defence Code (Law 8,078/1990), with which crypto and NFT marketing must comply
• India: Consumer Protection Act 2019; ASCI advertising guidelines (mandatory risk disclaimer, one-fifth ad space)
• China: SAMR consumer-protection and advertising oversight; Civil Code / E-Commerce Law; SPP warnings that buyers lack civil-law ownership of the underlying work
• South Africa: FAIS General Code of Conduct (for licensed CASPs); no NFT-specific consumer regime
• Thailand,
  Hong Kong,
  Singapore,
  Bahrain,
  UAE: investor/customer-protection rules operate through licensed-operator suitability and disclosure duties (Thai SEC suitability rules; SFC investor warnings; MAS PS-G03; CBB Cat 4 disclosure; VARA marketing approvals), not through bespoke NFT consumer statutes
• Canada,
  Germany,
  Switzerland,
  Liechtenstein: general provincial/federal consumer law applies; no NFT-specific consumer or loot-box instrument identified

These general frameworks are technology-neutral and apply to NFT sales without requiring specific amendment. However, they were not designed for blockchain-based digital assets and leave significant gaps around NFT delisting, platform closure, metadata integrity, and smart contract failures.

Sources:

• FTC, "Genshin Impact Game Developer Settlement" (January 2025)
• GOV.UK, "Loot boxes in video games: update on improvements to industry-led protections"
• Kim & Chang, "KFTC Announces Key Initiatives for 2025"

1.2 Gaming-Specific Regulation

A subset of jurisdictions has enacted rules specifically targeting randomised reward mechanics in games, which directly affect gaming NFTs:

• Japan: The Consumer Affairs Agency's 2012 ban on "complete gacha" (kompu gacha) under the Premiums Act, supplemented by 2025 gacha probability-display transparency rules mandating disclosure of drop rates for all banner tiers
• South Korea: Game Industry Promotion Act (GIPA) Article 32 prohibition on speculative rewards; the GIPA Enforcement Decree (in force 22 March 2024) mandating probability disclosure for loot-box items, extended by an October 2025 requirement that overseas providers appoint a domestic agent
• Brazil: Law No. 15,211/2025 (ECA Digital, "Lei Felca", in force 17 March 2026) bans paid random-reward loot boxes in games rated under 18 -- expressly capturing NFT-based play-to-earn and randomised-mint mechanics accessible to minors
• India: The Promotion and Regulation of Online Gaming Act, 2025 (in force 22 August 2025) bans "online money games"; its broad "tokens convertible to money" stake language can reach NFT/token-stake and loot-box-style mechanics (NOT VERIFIED as an NFT-specific clause)
• EU (member-state level): Belgium classifies all paid loot boxes as illegal gambling; the Netherlands treats paid loot boxes offering items with real-world value as unlawful gambling. There is no EU-wide loot-box rule
• France: The JONUM regime (below) is gaming-specific by design
• US: No federal loot-box law; Apple App Store and Google Play Store require probability disclosure as platform policy, not statute

Sources:

• Monolith Law Office, "An In-depth Explanation of Why 'Comp Gacha' is Illegal"
• Chambers, "Gaming Law 2025 -- South Korea"
• Key-Drop Blog, "EU Is Banning Lootboxes?"

1.3 Gambling Classification, Statutory Bans, and Mystery-Box Fraud Risk

The most restrictive approaches classify gaming NFTs as gambling instruments, ban paid random-reward mechanics outright, or flag mystery-box structures as fraud:

• South Korea: The Seoul Administrative Court ruled in 2023 that NFT items in the play-to-earn game "Five Stars for Klaytn" constituted prohibited speculative prizes under GIPA. The court found that NFTs traded on external exchanges "cannot be considered mere game items" and that the combination of "paid transactions and random structures" was too close to gambling. This established a de facto ban on domestic P2E games with NFT rewards under GIPA Article 32, still in force as of June 2026.
• Japan: Under Penal Code Articles 185-186, gambling requires four elements -- chance, property contribution, contest over gain or loss, and economic value at stake. NFT gacha systems risk gambling classification if players spend money on randomly determined NFTs that can be sold on secondary markets. The JCBA NFT Business Guidelines (3rd edition, August 2024) suggest that if every purchaser receives an NFT evaluated at approximately the purchase price, the "contest over gain or loss" element may not be satisfied.
• Brazil: Rather than a gambling test, Brazil deploys a statutory consumer-protection ban: Lei Felca prohibits paid random-reward loot boxes in under-18-rated games, mandates reliable age verification (self-declaration disallowed), applies extraterritorially to foreign providers, and imposes fines of up to 10% of group Brazilian revenue, capped at R$50M.
• India: The Online Gaming Act 2025 bans online money games irrespective of skill or chance, with penalties up to 3 years' imprisonment or a ₹1 crore fine; recreational social games remain permitted. The breadth of the stake definition leaves NFT/token-stake mechanics exposed (NOT VERIFIED as NFT-specific).
• China: Mystery boxes ("盲盒"), airdrops, and artificial-scarcity structures have been flagged by the Supreme People's Procuratorate (SPP) as fraud and illegal-fundraising risks; there is no dedicated loot-box statute and no gaming-NFT framework for collectibles. China's broader model is distinctive: crypto-native NFTs are effectively prohibited, while domestic "digital collectibles" (数字藏品) are legal for primary issuance via state-supervised, RMB-only platforms, but secondary trading and resale are banned in practice -- so consumer harm is addressed by suppressing the resale market rather than by loot-box rules.
• UK: The Gambling Commission has not classified loot boxes as gambling. The Gambling Act 2005 requires a "prize" of "money or money's worth" determined by chance. The Commission's position is that in-game items that cannot be cashed out do not meet this threshold -- but NFTs tradeable on secondary markets for cryptocurrency or fiat may cross this line.
• US: State-by-state analysis required. Most US courts have held that in-game items lacking cash-out value do not constitute gambling, but items tradeable on secondary markets (including NFTs) present greater risk. The New York Attorney General sued Valve Corporation on 25 February 2026 alleging that loot boxes in Counter-Strike 2, Team Fortress 2, and Dota 2 constitute illegal gambling because the resulting virtual items can be sold online for real money -- a signal of potential expansion to NFT loot mechanics.
• Thailand: No NFT-specific or loot-box-specific gaming regulation; the general Gambling Act B.E. 1935 exists, but no published Thai ruling addresses NFT loot mechanics (NOT VERIFIED). Game items tradeable for real value could in principle raise gambling questions.
• South Africa: Whether loot boxes constitute gambling is UNRESOLVED in South African law -- no court ruling or legislative determination as of June 2026. A gambling licence under the National Gambling Act 2004 (s 6 "pay-out" defined broadly) or the Lotteries Act 1997 could apply if an NFT loot-box/randomised-reward mechanic with real-money pay-out met the gambling definition; NO DATA FOUND of any such licence being granted.

Sources:

• CoinGeek, "South Korean Court Rules NFTs as Speculative"
• Lexology, "Court Upholds GRAC's Refusal to Rate SkyPeople's Game"
• NY AG, "Attorney General James Sues Game Developer for Promoting Illegal Gambling"
• Gambling Insider, "New York AG Sues Valve"
• So & Sato Law Offices, "Blockchain Games Regulations"

1.4 Dedicated Gaming NFT Frameworks

Only one jurisdiction has created a purpose-built regulatory regime for gaming NFTs:

• France -- JONUM Regime: The SREN Law (Law No. 2024-449, 21 May 2024) established Jeux a Objets Numeriques Monetisables (JONUM) -- games with monetisable digital objects based on chance. Operationalised by Decree No. 2026-60 (in force 7 February 2026), the JONUM framework:
  • Creates a distinct legal category between traditional gaming and regulated gambling
  • Requires operator declaration to the Autorite Nationale des Jeux (ANJ) before launch (15-day completeness review)
  • Excludes direct monetary gain (prohibits cash prizes in legal tender)
  • Caps the total value of digital asset rewards distributed to individual players over time
  • Restricts participation to adults only; minors are prohibited (age and identity verification mandatory)
  • Requires responsible-gaming tools: spending limits, play-time limits, self-exclusion
  • Runs as a three-year experimental regime to 22 May 2027, with mandatory parliamentary progress report
  • Requires AML/CFT compliance and blockchain/wallet tracking access for regulatory monitoring

This makes France the first jurisdiction globally to create a dedicated regulatory framework for NFT-based gaming, distinguishing it from both traditional gaming and gambling.

Sources:

• Baker McKenzie, "A Legal Framework for NFTs in Video Games: The Great French Experiment"
• Bird & Bird, "JONUM New Regime for Games with Monetizable Digital Objects"
• iGaming Business, "France Launches JONUM for Monetisable Digital Object Games"

1.5 Jurisdictions With No Published Loot-Box or Gaming-NFT Rule

Nine jurisdictions have no dedicated loot-box or gaming-NFT consumer rule in the verified record, relying instead on general consumer/financial law (or, in Thailand's case, on structural exclusion of NFTs from regulated venues):

• Canada: No specific ban; the comparison matrix records gaming-NFT status as "No specific ban"; Canadian loot-box odds-disclosure rules are NOT VERIFIED.
• Hong Kong: Not addressed in the verified record (NO DATA); SFC issues general investor warnings on NFT risks.
• Singapore: Not addressed (NO DATA); MAS PS-G03 consumer-protection guidelines (risk disclosures, suitability) apply to DPT services, not specifically to gaming NFTs.
• Germany,
  Switzerland,
  Liechtenstein: No loot-box/gaming-NFT rule stated; general consumer law applies.
• Bahrain: No NFT loot-box rule identified; CBB Category 4 licence conditions require clear contractual disclosure, transparent fees, and dispute resolution.
• UAE: No public NFT-specific gaming/loot-box regime; gaming NFTs fall under general virtual-asset frameworks, with VARA marketing rules requiring clear disclaimers and prior approval for promotions targeting Dubai residents.
• Thailand: Structurally exclusionary -- since 11 June 2021 licensed exchanges may not list NFTs, so the key NFT effect of Thai consumer rules is exclusionary rather than disclosure-based; no loot-box/NFT-as-gambling enforcement located (NOT VERIFIED).

2. Comparative Analysis

2.1 Jurisdiction Comparison Table

2.2 Primary vs. Secondary Market Consumer Protection

A critical distinction emerges across jurisdictions regarding NFT primary sales versus secondary market transactions:

Primary Sales (Minting/Initial Offering):

• All jurisdictions apply standard consumer protection law to primary NFT sales
• Japan's ASCT requires disclosure of seller identity, pricing, payment methods, and cancellation policy for online sales
• EU's Consumer Rights Directive grants a 14-day withdrawal right for distance contracts, which may apply to NFT primary sales (though not yet tested)
• US FTC Act and state consumer protection statutes prohibit deceptive marketing of NFT primary offerings
• Australia's ACL Section 29 prohibits false representations about characteristics, uses, or benefits of NFTs
• China is the structural outlier: primary issuance of domestic digital collectibles is permitted only through state-supervised, RMB-only platforms with mandatory real-name authentication of every participant, while secondary resale is banned in practice -- so consumer protection is delivered by channelling and suppressing the market rather than by ordinary primary-sale disclosure
• Thailand excludes NFTs from licensed exchanges entirely, so even compliant primary distribution generally cannot route through a regulated Thai venue

Secondary Market:

• Consumer protection coverage is significantly weaker on secondary markets
• Most jurisdictions do not extend the full suite of consumer protections to peer-to-peer secondary transactions
• UK's Consumer Rights Act 2015 digital content provisions apply only to "trader-to-consumer" transactions; peer-to-peer NFT resales are not covered
• Japan's Consumer Contract Act applies only to "consumer contracts" with a "business operator" -- private secondary sales may fall outside scope
• China suppresses the secondary market by policy (the April 2022 three-association anti-financialization initiative), so there is no ordinary secondary-market consumer regime to apply
• Marketplace operators bear residual liability for facilitating misleading listings or failing to provide adequate information

2.3 NFT Consumer Dispute Resolution

Consumer dispute resolution for NFT transactions remains underdeveloped globally:

3. What Works and What Doesn't

3.1 What Works

Japan's Kompu Gacha Ban (2012) -- The Gold Standard for Targeted Intervention

Japan's 2012 prohibition on complete gacha mechanics remains the single most effective regulatory intervention against predatory randomised reward systems in gaming. The ban was prompted by hundreds of consumer complaints in a single year, including cases of children spending thousands of dollars. The Consumer Affairs Agency's action was swift, precisely targeted (prohibiting only the specific "collect-a-set" mechanic), and proportionate (not banning all gacha, only the most exploitative variant). Industry compliance was near-universal -- major companies voluntarily removed complete gacha before the 2012 enforcement date.

The 2025 update requiring probability disclosure for all gacha tiers extends this approach, demanding transparency without prohibition. This tiered model -- ban the most harmful mechanics, mandate transparency for the rest -- represents best practice.

Sources:

• Gamedeveloper.com, "Why Kompu Gacha Was Banned"
• Yahoo News, "Japan's Consumer Affairs Agency Deems Kompu Gacha Sales a Violation"

FTC Cognosphere Enforcement (2025) -- Cross-Sector Precedent

The FTC's $20 million fine against Cognosphere LLC (HoYoverse) for Genshin Impact loot-box violations established critical precedent applicable to gaming NFTs. The FTC found that HoYoverse deceived players about the odds of winning "five-star" loot-box prizes and the true cost of obtaining them. The settlement order bans loot-box sales to children under 16 without parental consent, requires truthful probability disclosure, and prohibits the use of virtual currency as an intermediary to obscure real-money costs. While not an NFT case, this enforcement directly applies to any gaming NFT system using randomised distribution -- and in 2026 the New York AG's suit against Valve extended the same real-money-resale logic to mystery-box mechanics.

Sources:

• FTC Press Release, "Genshin Impact Game Developer Settlement"
• FTC Business Guidance, "Level Up: Tips from the HoYoverse Settlement"

France's JONUM Framework -- Regulatory Innovation

France's JONUM regime is the only purpose-built framework for gaming NFTs globally. By creating a distinct legal category between pure gaming and regulated gambling, it avoids the binary classification problem that plagues other jurisdictions (where gaming NFTs must be either "not gambling" or "gambling" with no middle ground). The three-year experimental period (to 22 May 2027) with mandatory parliamentary review allows evidence-based evaluation before permanent legislation. The mandatory spending caps, self-exclusion tools, exclusion of direct monetary gain, and minor prohibition address the core consumer protection concerns without banning the technology.

Sources:

• Baker McKenzie, "The Great French Experiment"
• iGaming Business, "France Launches JONUM"

Brazil's Lei Felca -- A Statutory, Extraterritorial Child-Protection Ban

Brazil's Law No. 15,211/2025 (ECA Digital, in force 17 March 2026) demonstrates a second effective model: a statutory, extraterritorial ban on paid random-reward loot boxes in games rated under 18, expressly reaching NFT-based play-to-earn and randomised-mint mechanics. By requiring reliable age verification (self-declaration disallowed), applying to foreign providers, and backing the ban with fines of up to 10% of group Brazilian revenue (capped R$50M), Lei Felca converts the consumer-protection concern into an enforceable, child-focused prohibition rather than relying on an unresolved gambling test.

South Korea's Substance-Over-Form NFT Classification (2024)

The FSC's June 2024 guidelines establishing a substance-over-form approach to NFT classification -- examining whether mass-produced, fractionalised, or payment-functional NFTs should be treated as virtual assets regardless of their "NFT" label -- provide a principled foundation for consumer protection. By looking through the technology to the economic substance, the framework prevents regulatory arbitrage through labelling. South Korea pairs this with statutory loot-box probability disclosure (GIPA Enforcement Decree, March 2024), one of only two jurisdictions to mandate disclosure by law.

3.2 What Doesn't Work

UK Loot Box Self-Regulation -- Documented Failure

The

UK's reliance on industry self-regulation for loot boxes is the clearest documented failure in this space. Research published in Royal Society Open Science (2025) found:

• 12.5% compliance with principles on restricting loot box purchasing without parental consent
• 23.5% compliance with principles on disclosing loot box presence
• 8.6% compliance with principles on disclosing loot box probabilities
• Zero enforcement actions taken against non-compliant games despite Ukie's July 2023 promise of "severe fines" and "delisting"

The study examined the 100 highest-grossing iPhone games and found that none sought explicit parental consent before enabling loot-box purchasing by under-18s. Noncompliant games were reported to Ukie and the UK government more than six months before publication, with no response. This demonstrates that voluntary industry codes without enforcement mechanisms are ineffective for consumer protection in gaming monetisation.

Sources:

• Royal Society Open Science, "Non-compliance with and non-enforcement of UK loot box industry self-regulation"
• Royal Society Blog, "UK Video Game Industry FAILS to Self-Regulate"
• TechXplore, "UK Loot Box Self-Regulation Fails"

Gambling Act Binary Classification -- Inadequate for Gaming NFTs

Jurisdictions that rely on a binary "gambling or not gambling" classification struggle with gaming NFTs. The UK Gambling Commission's position that in-game items lacking "money or money's worth" do not constitute gambling fails to account for NFTs that are tradeable on secondary markets for cryptocurrency.

South Africa illustrates the same gap from the other direction: whether loot boxes are gambling is simply UNRESOLVED -- no court ruling or legislative determination as of June 2026. Conversely,

South Korea's de facto ban on all P2E games through GRAC rating refusals is overly broad, driving Korean gaming companies offshore and creating a competitive disadvantage without addressing the underlying consumer protection concerns in a nuanced way.

Absence of a Statutory Framework in Most Jurisdictions

The lack of any dedicated loot-box or gaming-NFT legislation across most of the survey -- including federally in the

US, and entirely in

Canada,

Hong Kong,

Singapore,

Germany,

Switzerland,

Liechtenstein,

Bahrain, and the

UAE -- leaves consumer protection to a patchwork of general consumer law, financial-services suitability rules, app-store policies, and case-by-case enforcement. The result is inconsistent protection: a child in New York may have different protections from a child in Texas for the same game, and a player in Singapore or Germany has no NFT-specific loot-box safeguard at all. The SEC/CFTC March 2026 joint taxonomy classifying "digital collectibles" as non-securities addresses securities law but does nothing for consumer protection or child safety in gaming.

Broad Money-Game Bans -- Risk of Overreach

India's Online Gaming Act 2025 bans "online money games" irrespective of skill or chance. While decisive, its broad "tokens convertible to money" stake language is so wide that its application to NFT/token-stake and loot-box mechanics is uncertain (NOT VERIFIED as NFT-specific), risking both over-inclusion of legitimate Web3 gaming and under-clarity for operators -- the mirror image of South Korea's blunt P2E ban.

4. Recommended Framework: Tiered Approach for Consumer and Gaming NFT Regulation

Based on comparative analysis, the following tiered framework is recommended for jurisdictions seeking to establish or reform consumer protection and gaming NFT regulation.

4.1 Tier 1: Universal Consumer Protection (All NFTs)

Applicable to: All NFT transactions regardless of use case.

4.2 Tier 2: Gaming-Specific Consumer Protection (Gaming NFTs)

Applicable to: NFTs distributed through, or used within, video games and interactive entertainment.

4.3 Tier 3: Child Protection (Gaming NFTs Accessible to Minors)

Applicable to: Gaming NFTs in games accessible to players under 18.

4.4 Tier 4: Play-to-Earn and Gambling Interface

Applicable to: Games where NFTs can be earned through gameplay and sold on secondary markets for fiat currency or cryptocurrency.

5. Decision Matrix

5.1 Regulatory Classification Decision Tree for Gaming NFTs

The following decision matrix assists regulators in classifying gaming NFTs and determining the applicable regulatory framework:

START: Is the digital asset unique and non-fungible?
  |
  +-- NO --> Apply standard crypto-asset/virtual asset regulation
  |          (MiCA, VAUPA, PSA, Decree on Digital Asset Businesses, etc.)
  |
  +-- YES --> Is the NFT distributed through randomised mechanics
              (loot boxes, gacha, mystery boxes)?
                |
                +-- NO --> Apply Tier 1 (Universal Consumer Protection) only
                |
                +-- YES --> Does the randomised distribution require payment
                            (fiat, crypto, or in-game currency purchased with real money)?
                              |
                              +-- NO --> Apply Tier 1 + Tier 2 (probability disclosure only)
                              |
                              +-- YES --> Can the resulting NFTs be sold on secondary
                                          markets for fiat or cryptocurrency?
                                            |
                                            +-- NO --> Apply Tier 1 + Tier 2
                                            |          (gaming consumer protection)
                                            |
                                            +-- YES --> Is the game accessible to minors?
                                                          |
                                                          +-- YES --> Apply Tiers 1-4
                                                          |          (full framework including
                                                          |          child protection and P2E rules)
                                                          |
                                                          +-- NO --> Apply Tiers 1, 2, and 4
                                                                     (gaming + P2E rules, no minor
                                                                     protection needed)

5.2 Enforcement Priority Matrix

5.3 Jurisdictional Readiness Assessment

6. Analysis: Key Questions Answered

6.1 How Do Jurisdictions Classify Gaming NFTs?

Classification approaches fall into four categories:

1. Functional analysis (majority approach):

   Japan, the
   EU, the
   UK,
   Australia,
   Singapore,
   Hong Kong,
   Switzerland,
   Germany,
   Liechtenstein,
   South Africa, and the
   US all employ substance-over-form tests that examine what the NFT actually does, not what it is labelled. Under this approach, a gaming NFT is classified based on whether it functions as a payment instrument, investment vehicle, gambling mechanism, or pure utility/collectible.

2. Categorical / statutory prohibition (

   South Korea,
   Brazil,
   India): South Korea's GRAC refusal to rate P2E games with NFT rewards effectively treats all monetisable gaming NFTs as speculative instruments prohibited under GIPA; the Seoul Administrative Court's 2023 ruling reinforced this. Brazil's Lei Felca and India's Online Gaming Act take a statutory route -- banning paid random-reward mechanics for minors (Brazil) or online money games generally (India).

3. Purpose-built category (

   France): The JONUM framework creates a third classification -- neither pure gaming nor gambling -- with tailored obligations. This is the only jurisdiction to recognise gaming NFTs as a sui generis category requiring bespoke regulation.

4. Structural exclusion / controlled-issuance (

   China,
   Thailand): China prohibits crypto-native NFTs and confines collectibles to state-supervised primary issuance with secondary trading banned, while flagging mystery-box mechanics as fraud; Thailand excludes NFTs from licensed exchanges entirely. Neither addresses gaming NFTs through a dedicated consumer/gaming rule.

6.2 What Consumer Protection Rules Apply to NFT Primary Sales vs. Secondary Market?

Primary sales benefit from robust consumer protection in most jurisdictions: seller disclosure requirements, prohibitions on misleading conduct, and (in the EU) potential withdrawal rights. Secondary market protection is significantly weaker -- most jurisdictions treat peer-to-peer secondary NFT sales as private transactions outside the scope of business-to-consumer regulation.

China is the extreme case: it permits primary issuance only through state-supervised RMB-only platforms and bans secondary resale in practice, so there is no ordinary secondary-market consumer regime to apply. Marketplace operators elsewhere bear residual obligations to prevent misleading listings and provide platform-level complaint handling, but individual secondary-market sellers face minimal regulatory burden.

6.3 What Child Protection Rules Exist for Gaming NFTs?

Child protection for gaming NFTs is nascent and highly uneven:

• France (JONUM): Most comprehensive -- minors are entirely prohibited from participating in JONUM games
• Brazil (Lei Felca): Statutory ban on paid random-reward loot boxes in under-18-rated games, with reliable (non-self-declared) age verification and extraterritorial reach
• US (FTC): The Cognosphere settlement bans loot-box sales to under-16s without parental consent, establishing precedent but only for this specific operator
• South Korea: GRAC age ratings effectively prevent minors from accessing domestic P2E games
• India: The Online Gaming Act bans online money games; recreational social games for minors remain permitted, but no NFT-specific child rule exists
• Japan: No specific child protection for gaming NFTs beyond the general kompu gacha ban
• UK: Self-regulation has failed -- none of the 100 highest-grossing games complied with parental-consent principles
• EU: UCPD provides general protection for "vulnerable consumers" including children, but no gaming-NFT-specific rules exist
• China,
  Canada,
  Australia,
  Singapore,
  Hong Kong,
  Thailand,
  Germany,
  Switzerland,
  Liechtenstein,
  Bahrain,
  UAE,
  South Africa: no NFT-specific child-protection rule for gaming identified in the verified record

6.4 How Do Play-to-Earn Games Intersect with Gambling Regulation?

The intersection is determined by three factors: (a) whether acquiring NFTs involves a payment, (b) whether outcomes are determined by chance, and (c) whether resulting NFTs have real-world monetary value. When all three are present, the activity closely resembles gambling:

• Japan: Penal Code gambling analysis examines the four elements; P2E games that ensure minimum value for all NFT recipients may avoid classification
• South Korea: Effectively treats the intersection as gambling-equivalent through GIPA anti-speculation provisions (de facto P2E ban)
• Brazil: Sidesteps the gambling test for minors via a direct statutory ban on paid random-reward loot boxes (Lei Felca)
• India: Bans online money games outright, potentially capturing token/stake P2E (NOT VERIFIED for NFTs)
• France: Creates a middle ground through JONUM -- acknowledging the gambling-adjacent nature while permitting it under strict conditions and excluding direct monetary gain
• UK: Unresolved; Gambling Commission has not acted despite secondary-market tradability of gaming items
• South Africa: Unresolved; no court ruling or legislative determination on loot-box gambling status
• US: State-by-state analysis; no federal resolution; NY AG v. Valve tests the real-money-resale theory

6.5 What Disclosure and Transparency Requirements Exist for NFT-Based Randomised Rewards?

Mandatory probability disclosure is the most widely cited measure, but only two jurisdictions mandate it by statute:

6.6 What Are Best Practices for NFT Consumer Dispute Resolution?

Best practices drawn from the comparative analysis:

1. Mandatory internal complaint procedures for all NFT marketplace operators (modelled on EU MiCA CASP requirements, Japan JCBA guidelines, and Bahrain CBB Cat 4 conditions)
2. Accessible external dispute resolution through consumer protection agencies or ombudsman services, with jurisdiction clearly established for digital asset disputes
3. Class action or collective redress availability for systemic consumer harm (US model: DraftKings $10M settlement, Nike/RTFKT class action)
4. Regulatory enforcement as a backstop where industry-level resolution fails (FTC enforcement model; KFTC monitoring; AMF/ANJ supervision; Brazil consumer authorities under Lei Felca)
5. Smart contract audit and disclosure requirements to reduce the incidence of technical disputes arising from bugs or unexpected behaviour
6. Platform responsibility for marketplace operators to maintain records of all transactions and cooperate with regulatory investigations (South Korea KoFIU reporting; France ANJ blockchain access; China real-name authentication of all participants)

7. Conclusion and Monitoring Points

The global regulatory landscape for consumer protection and gaming NFTs is at an inflection point. Across the 20 jurisdictions surveyed, statutory action remains the exception rather than the rule: only France has a purpose-built regime, only Japan and South Korea mandate probability disclosure by law, and nearly half the survey has no published loot-box or gaming-NFT rule at all. Several developments will shape the next two years:

1. France JONUM results (2026-2029): The three-year experimental period (to 22 May 2027) will generate the first real-world data on dedicated gaming NFT regulation. If successful, the JONUM model will likely influence EU-wide legislation through the pending Digital Fairness Act and provide a template for other jurisdictions.

2. Brazil Lei Felca enforcement (2026 onward): The in-force (17 March 2026) extraterritorial ban on paid random-reward loot boxes in under-18 games is the first major test of a statutory, child-focused prohibition reaching NFT mechanics. Its enforcement against foreign providers will signal whether the statutory-ban model travels.

3. South Korea P2E reform (2026-2027): President Lee Jae-myung's pro-gaming reform agenda creates the prospect of South Korea moving from blanket prohibition to a graduated framework. Any reform to GIPA or GRAC's rating practices will have outsized global influence given South Korea's position as a major gaming market.

4. UK legislative response to self-regulation failure (2026-2027): The documented collapse of voluntary loot-box self-regulation, combined with the New York v. Valve litigation precedent, creates mounting pressure for statutory intervention. Whether the UK government legislates or continues to rely on failed voluntary codes will signal the viability of self-regulation as a model globally.

5. US federal loot box legislation (2026-2027): The absence of federal rules remains a significant gap among major jurisdictions. The FTC Cognosphere precedent and NY AG v. Valve lawsuit may accelerate congressional action, but no bill is currently advancing.

6. EU Digital Fairness Act (2026-2027): The proposed Act could establish the first harmonised EU-wide rules on loot boxes and gaming monetisation, replacing the current patchwork of Belgian bans, Dutch restrictions, and member-state inaction.

7. India Online Gaming Act application to NFTs (2026): Whether the money-game ban is read to capture NFT/token-stake mechanics will determine the viability of Web3 gaming in a major market (NOT VERIFIED as an NFT-specific clause).

Regulators, legal practitioners, and financial institutions should monitor these developments closely. The recommended tiered framework in Section 4 provides a structured approach for jurisdictions at any stage of regulatory maturity, from those with no gaming NFT rules (Canada, Singapore, Germany, Switzerland, Liechtenstein, Bahrain, UAE, Thailand, most US states) to those seeking to refine existing frameworks (Japan, South Korea, France, Brazil).

8. Verification Notes

Coverage and Method (June 2026 refresh)

This document mirrors the verified per-jurisdiction t7 facts (loot-box rule, disclosure, gaming overlap) from the canonical fact matrix for all 20 jurisdictions: the United States, Brazil, Canada, Australia, Japan, Singapore, South Korea, China, Thailand, India, the European Union, France, Germany, Liechtenstein, Switzerland, the United Kingdom, Bahrain, the UAE, and South Africa. The four jurisdictions added in this refresh -- China, Thailand, India, and South Africa -- are integrated into every table, list, prose bucket, and the spectrum/readiness assessments. All "X of N" aggregates are derived from the matrix for N=20.

Aggregates Derived (N=20)

• Dedicated purpose-built gaming-NFT regime: 1 (France -- JONUM)
• Statutory probability disclosure by law: 2 (Japan, South Korea)
• Statutory bans reaching paid random-reward / money-game mechanics: 3 verified jurisdictions (Brazil -- Lei Felca; India -- Online Gaming Act; plus EU member-state bans in Belgium and the Netherlands)
• De facto P2E ban: 1 (South Korea, via GIPA Art. 32 / GRAC)
• Loot-box gambling status expressly unresolved: 2 (South Africa, UK -- Commission has declined to classify)
• No published loot-box / gaming-NFT rule (general law only or structural exclusion): 9 (Canada, Hong Kong, Singapore, Germany, Liechtenstein, Switzerland, Bahrain, UAE, Thailand)

China's Distinctive Model

China is reflected precisely per the matrix: crypto-native NFTs are effectively prohibited, while domestic "digital collectibles" (数字藏品) are legal for primary issuance via state-supervised, RMB-only platforms, with secondary trading and resale banned in practice. China has no dedicated loot-box statute and no gaming-NFT framework; mystery-box ("盲盒") and artificial-scarcity mechanics are flagged by the SPP as fraud/illegal-fundraising risks.

"NOT VERIFIED" / "NO DATA" Items Carried Honestly

• Brazil and India: no NFT-specific loot-box probability-disclosure rule stated (NOT VERIFIED); India's money-game ban is NOT VERIFIED as an NFT-specific clause
• Canada: loot-box odds-disclosure and gaming overlap NOT VERIFIED beyond "no specific ban"
• Hong Kong, Singapore, Germany, Liechtenstein, Switzerland, Bahrain: loot-box/gaming overlap not addressed in the source record (NO DATA)
• Thailand: no published ruling on NFT loot mechanics (NOT VERIFIED); Gambling Act B.E. 1935 untested against NFTs
• South Africa: loot-box gambling status UNRESOLVED; NO DATA of any NFT/loot-box gambling licence

Sources Verified

All primary regulatory and enforcement sources cited in this document were verified at the time of the underlying jurisdiction research. Key gaming/consumer instruments confirmed include: FTC Genshin Impact / Cognosphere settlement (January 2025); NY AG v. Valve complaint (25 February 2026); Japan Premiums Act kompu gacha enforcement (2012) and 2025 probability-display rules; South Korea GIPA Enforcement Decree (22 March 2024) and the Five Stars for Klaytn ruling; Brazil Law No. 15,211/2025 (ECA Digital / Lei Felca, in force 17 March 2026); India Promotion and Regulation of Online Gaming Act, 2025 (in force 22 August 2025); France SREN Law No. 2024-449 and Decree No. 2026-60 (JONUM, in force 7 February 2026); UK Royal Society Open Science loot-box self-regulation study (2025); and China SPP NFT criminal-risk guidance (May 2023).

Cross-References

• US -- FTC enforcement; NY AG v. Valve; SEC/CFTC taxonomy
• Brazil -- Lei Felca under-18 loot-box ban; Consumer Defence Code
• Canada -- no specific loot-box ban; provincial consumer law
• Australia -- ACL; ASIC INFO 225 in-game NFTs
• Japan -- Kompu gacha ban; Premiums Act; Penal Code gambling analysis; 2025 probability rules
• Singapore -- MAS PS-G03; no loot-box rule
• South Korea -- GIPA anti-speculation; Five Stars for Klaytn ruling; probability disclosure; VAUPA
• China -- controlled-issuance digital collectibles; mystery-box fraud warnings; secondary-trading ban
• Thailand -- structural exclusion of NFTs from licensed venues; Gambling Act B.E. 1935
• India -- Online Gaming Act 2025 money-game ban; ASCI ad rules
• EU -- MiCA NFT exemption; UCPD; Digital Fairness Act; Belgium/Netherlands bans
• France -- JONUM gaming-NFT regime; ANJ supervision
• Germany -- general consumer law; no loot-box rule
• Liechtenstein -- general consumer law; no loot-box rule
• Switzerland -- general consumer law; no loot-box rule
• UK -- self-regulation failure; Gambling Act 2005; Consumer Rights Act 2015
• Bahrain -- CBB Cat 4 disclosure; no loot-box rule
• UAE -- VARA marketing rules; no dedicated gaming-NFT regime
• South Africa -- loot-box gambling status unresolved; FAIS Code of Conduct
• securities classification -- When gaming NFTs become securities
• marketplace regulation -- Platform obligations for gaming NFT marketplaces