Malaysia Proposes New Regulations for Loot Boxes and In-Game Purchases
AI-GENERATEDThe Malaysian CMCF has launched a 45-day public consultation on a new Gaming Sub-Code focusing on loot boxes, Gacha mechanics, and child safety.
A significant regulatory shift is underway in the Malaysian gaming sector. The Communications and Multimedia Content Forum of Malaysia (CMCF) has officially launched a public consultation period to establish new standards for the video game industry. The primary focus of this initiative is to address mechanics that blur the lines between traditional gaming and gambling, such as loot boxes and gacha systems. Authorities are responding to the rapid evolution of a market where virtual currencies and real-money transactions have become integrated into the core experience.
The proposed initiative aims to create a Gaming Sub-Code, which will serve as a sector-specific standard for developers, publishers, and platform operators. This code is intended to complement, rather than replace, existing laws by providing clearer expectations for stakeholders. The urgency of this regulatory step is driven by the fact that modern games now blend social interaction, digital commerce, and competition into a single environment, exposing children to complex risks that were previously non-existent.
Numbers and facts
The public consultation is scheduled for a duration of exactly 45 days, concluding on October 24. During this window, citizens, industry representatives, and experts are invited to provide feedback on the draft. The document was crafted by a high-level working group that included global industry giants such as MOONTON Games (Mobile Legends: Bang Bang), PUBG Mobile, and Honor of Kings, alongside platform giants like Roblox, Xbox, PlayStation, and the Google Play Store. Minecraft representatives were also involved in the preliminary discussions.
In addition to corporate entities, local advocacy groups participated, including the Office of the Children’s Commissioner, the Human Rights Commission of Malaysia (SUHAKAM), and Protect and Save the Children. The draft addresses critical issues such as age classification, parental controls, the presentation of virtual currencies, and the transparency of winning probabilities in chance-based mechanics.
Background
CMCF Chairman Datuk Rafiq Razali emphasized that safety measures must evolve in tandem with technological advancements. He noted that the fusion of entertainment and spending requires a deep understanding of gaming practices, which is why such a diverse range of stakeholders was included in the process. The goal is to establish a flexible framework that ensures user protection without stifling industry innovation.
"Gaming has brought entertainment, social interaction, and spending into the same space. Safeguards must develop alongside these features, particularly where younger players are involved." - Datuk Rafiq Razali, Chairman of CMCF
Esports representatives have also voiced their support for the proposal. Ahmed Faris bin Amir, CEO of Impact Integrated, pointed out that Malaysia's esports ecosystem is expanding rapidly, making clear safeguards essential during this growth phase. Esports educator Andrew Cheong added that more transparent information regarding virtual currencies would help parents and players make better-informed financial decisions. A central concern remains whether chance-based features like loot boxes are explained clearly enough, as these mechanics are under global scrutiny due to their proximity to gambling.
Why it matters for German players
While these developments are specific to Malaysia, they mirror a debate that is being conducted with high intensity in Germany. The German Interstate Treaty on Gambling 2021 (GlüStV 2021) already sets extremely high standards for online gambling to ensure youth and player protection. This includes a monthly deposit limit of 1,000 euros via the LUGAS system and a one-euro stake limit per round for virtual slots. Loot boxes in video games are frequently criticized in Germany as a potential gateway to gambling due to their use of similar psychological reward mechanisms.
For German players, this international development in Malaysia signifies growing pressure on global publishers to adjust their monetization strategies worldwide. As more countries regulate loot boxes, developers may be forced to implement more transparent systems that ultimately benefit German consumers as well. In Germany, discussions continue regarding whether loot boxes should be governed by youth protection laws or directly by gambling regulations, which would have significant implications for game age ratings.
What it means for GGL-licensed casinos
For operators listed on the official whitelist of the Gemeinsame Glücksspielbehörde der Länder (GGL), clear differentiation from the unregulated market is vital. While video game publishers often operate in regulatory gray areas, GGL-licensed casinos must adhere to strict requirements for identity verification and addiction prevention. The efforts in Malaysia demonstrate that the dividing line between gaming and gambling is fading globally. German licensed providers can serve as a model for transparency and state-supervised safety, whereas unregulated offshore providers often utilize the very mechanics that Malaysia is now looking to restrict.
Frequently asked questions
How long does the consultation phase in Malaysia last?
The public consultation on the new gaming rules is set for a period of 45 days. it officially concludes on October 24, 2026.
Which gaming companies are involved in the process?
Prominent companies such as MOONTON Games (Mobile Legends), PUBG Mobile, Honor of Kings, as well as platform providers like Xbox, PlayStation, and Roblox are participating. Experts from Minecraft and the Google Play Store are also represented in the working group.
What exactly is the Gaming Sub-Code intended to regulate?
The draft addresses in-game purchases, virtual currencies, loot boxes, and gacha systems. Additionally, age verification and parental control options are central to the child safety focus.
How does this affect German players and GGL regulation?
In Germany, online casinos are strictly regulated by the GlüStV 2021, including a 1,000 euro deposit limit. The Malaysian initiative strengthens the global trend toward loot box regulation, which could eventually influence the classification of such games in Germany.
Share
About the author

Lisa Lustich
Editor-in-chief & casino tester
Lisa Lustich has been testing German-language online casinos since 1997 and runs the Lustich.de newsroom. More than 400 published reviews, certified player-protection advisor (BZgA training, 2019).
All articles by Lisa Lustich →Sources & further reading
Whitelist of permitted online operators
Editorial guidelines Lustich.de
BZgA problem-gambling helpline: 0800 1 372 700
Gambling can be addictive. Please play responsibly. Help and counselling at 0800 1 372 700 (BZgA, free & anonymous).
Read this article in 46 languages
- German
- English
- Portuguese
- French
- Italian
- Spanish
- Japanese
- Polish
- Arabic
- Dutch
- Russian
- Turkish
- Swedish
- Danish
- Norwegian
- Finnish
- Korean
- Hindi
- Indonesian
- Thai
- Vietnamese
- Chinese
- Czech
- Hungarian
- Romanian
- Greek
- Ukrainian
- Croatian
- Bulgarian
- Filipino
- Slovak
- Serbian
- Hebrew
- Persian
- Malay
- Urdu
- Albanian
- Afrikaans
- Lithuanian
- Latvian
- Estonian
- Slovenian
- Uzbek
- Swahili
- Azerbaijani
- Hausa
Related topics
Further Reading
AI-GENERATEDThailand Fights Dirty Money: Gold Tax to Crack Down on Illegal Gambling
Thailand is considering a 0.01% tax on gold transactions to disrupt the laundering of assets from the 25.1 billion GBP illegal gambling industry.
AI-GENERATEDConnecticut Crackdown on Prediction Markets, Playtech H1 Profits Soar
Connecticut regulators issued cease-and-desist orders to nine prediction platforms, while Playtech reported H1 2026 revenues of €425.1 million.
AI-GENERATEDGeorge Santos and Bill Simmons: How Prediction Markets Rebrand Gambling
High-profile controversies in the US reveal how prediction markets blur the lines between finance and gambling. George Santos faces over $80,000 in fines.











