Online Gaming Rules 2026

The Online Gaming Rules, introduced in 2026, establish a comprehensive operational framework under the Promotion and Regulation of Online Gaming (PROG) Act, 2025, active from May 1.

The Act, passed in August 2025, addresses the challenges associated with online money gaming while fostering a well-structured environment for e-sports and social gaming. These rules aim to position India as a global leader in gaming and innovation, while simultaneously safeguarding users from potential financial losses, addiction, and misleading promises of quick money.

Understanding the Online Gaming Rules

The Online Gaming Rules outline practical implementations of the law. They establish a formal framework for categorising online games, regulating specific types, and detailing the responsibilities of gaming platforms.

Additionally, they set up a digital-first regulatory authority, ensure user safety measures, and create a process for complaints and appeals.

Classification of Games

Central to the framework is a “determination test” that assesses whether a game qualifies as an online money game, or is a permissible social game or e-sport.

This assessment can be initiated in three ways: by the regulator independently, via a request from a gaming company, or at the government’s instruction to evaluate a specific category.

Classification will rely on several factors, including user payment requirements, anticipated monetary rewards, the platform’s revenue model, and the possibility of converting in-game rewards into real-world value. The regulator is expected to complete this classification within 90 days.

The Role of the Regulator

The Online Gaming Authority of India has been established as the central digital-first regulator under the Ministry of Electronics and Information Technology (MeitY).

This Authority will comprise representatives from various ministries including home affairs, finance, information and broadcasting, sports, and law.

The Authority’s responsibilities include maintaining a list of online money games, managing complaints, issuing directives, and collaborating with banks, payment systems, and law enforcement agencies.

Registration Requirements for Games

Not all games must undergo registration. Registration will only be necessary for categories specified by the government, which will consider user risk, scale, financial transactions, and for those seeking recognition as e-sports.

Upon approval, platforms will receive a digital certificate valid for up to 10 years. Notably, games identified as online money games will not have the status of e-sports.

Obligations for Gaming Platforms

Platforms that are either registered or seeking classification must adhere to several obligations. These consist of displaying their registration or classification status prominently, designating a point of contact, complying with data retention policies, and observing payment-related directives.

Furthermore, they are required to transparently disclose their safety measures and grievance mechanisms.

User Safety Measures

The new rules also incorporate essential “user safety features” tailored to each game’s risk profile. These safety measures include age verification, time limits, parental controls, reporting tools, counselling support, and systems to promote fair play.

The focus is on reducing addiction risks and safeguarding vulnerable users, particularly children.

Complaint Filing Procedure

The framework presents a dual-layer grievance redressal system. Users are required to first engage with the gaming platform. If the response is unsatisfactory, they can escalate the matter to the Online Gaming Authority within 30 days.

A subsequent appeal can be made to the MeitY Secretary, serving as the Appellate Authority. Each stage is anticipated to be resolved within 30 days.

Consequences of Violations

The Online Gaming Rules provide for penalties in cases of non-compliance. Proceedings will predominantly be handled digitally, expected to conclude within 90 days. The penalties will consider the severity of the violation, any profits gained from non-compliance, user harm, and whether the breach is recurrent.