A week before your Steam launch, you receive an email: your game did not pass review. The reason? Its terms and conditions. The same terms you copied from a competitor eight months ago and have not opened since.
This is not an invented scenario. Steam’s standard review time for a store page is 3 to 5 business days, and Valve recommends submitting materials at least 7 days before the planned release. If your terms do not meet platform requirements, consumer law or the game’s actual monetization model, the launch is delayed and you lose the marketing window and money.
Game and platform terms are not a legal document “for the drawer.” They are an operational layer of the product that affects three things at once: whether the game reaches a platform, whether monetization causes a wave of chargebacks, and whether the community remains manageable.
This article covers:
- The laws that shape gaming studios’ obligations in Poland and the EU in 2026.
- What Steam, Epic Games Store and GOG check in your game terms.
- How to set rules for monetization, including microtransactions, DLC, loot boxes and subscriptions, without exposing the studio to consumer-law claims.
- How to manage the community and player-generated content (UGC) under the Digital Services Act (DSA).
- What to do step by step so the terms support a launch rather than block it.
Key terms you need to know
Before getting into the details, it helps to clarify terms with specific legal meanings and consequences for a game studio.
| Term | Meaning for a game studio |
|---|---|
| Digital content | Data produced and supplied in digital form, such as a game, DLC, skin or in-game currency. Since 1 January 2023, it has been subject to a separate regime under the Polish Consumer Rights Act, Articles 43j to 43q. |
| Digital service | A service that allows data in digital form to be created, processed or stored, such as multiplayer mode, cloud saves or matchmaking. |
| SSA (Steam Subscriber Agreement) | Steam’s main agreement with users. Your game’s EULA must not conflict with it. If the two conflict, the SSA governs. |
| DSA (Digital Services Act) | Regulation (EU) 2022/2065, applicable since 17 February 2024. It regulates content moderation, reporting illegal content and platform appeal procedures. |
| UGC (user-generated content) | Everything players create: forum posts, reviews, mods, skins and gameplay recordings. The platform operator is responsible for the rules governing UGC. |
| Loot box | A random mechanic in a game: a player pays for a “box” containing random items. In Poland it is outside the scope of the Gambling Act under the Finance Ministry’s 2019 position, but remains under EU scrutiny. |
| Chargeback | A bank reverses a transaction at a player’s request. The cost is doubled: refunding the money, paying a chargeback fee and potentially facing a higher payment-processor fee. |
Which rules shape game terms in 2026?
Game and gaming-platform terms do not exist in a vacuum. Several separate regulatory regimes apply at once. Omitting any of them leaves a gap that a regulator, distribution platform or dissatisfied player may use.
The Consumer Rights Act and Directive 2019/770
Since 1 January 2023, Polish rules implementing the Digital Content Directive (Directive 2019/770) have applied. UOKiK expressly lists computer games as digital content covered by this regime. The main duties are:
- Pre-purchase information. Tell players about the game’s functionality, DRM restrictions, system requirements, interoperability with hardware and software, and update rules, under the Digital Content Directive 2019/770.
- Right to withdraw. A player has 14 days to withdraw from a distance contract. That right expires only if all three conditions are met: the player expressly consents to performance beginning, is informed that the withdrawal right will be lost, and receives confirmation of that consent.
- Liability for lack of conformity. You are responsible for defects in digital content for 2 years from delivery. For games supplied continuously, such as games as a service, liability lasts throughout the contract.
- Unilateral changes to content. You may close multiplayer servers or remove a game mode, but you must have a basis in the terms, state justified reasons, give advance notice and inform the player of the right to terminate within 30 days.
Free-to-play games and “payment with data”
The Omnibus Directive 2019/2161, implemented from 1 January 2023, extended consumer protection to contracts where a player provides personal data instead of paying a price. If your free-to-play game processes users’ personal data, it is subject to the same information duties as a premium game.
GDPR and the privacy policy
Every game’s terms must be consistent with its privacy policy. This is particularly relevant to: data collected during account registration; player profiling for matchmaking or advertising; analytics of in-game behavior; and processing children’s data, including parental consent.
DSA: content and community moderation
The Digital Services Act (DSA), Regulation (EU) 2022/2065, has applied since 17 February 2024. If your game has built-in chat, a forum or a UGC system, you are a hosting-service provider under the DSA and must meet requirements for moderation, content reporting and appeals. Poland’s Digital Services Coordinator is the President of UKE, as of 15 May 2025. The full scope of its powers was to be set by a separate act; draft UC21 was sent to parliamentary work in September 2025.
The P2B Regulation
Regulation (EU) 2019/1150 governs platform-business relations. Platforms must set out their terms, procedures for changing them, parameters for ranking games in the store and an internal dispute-resolution system. As a developer, you need to know these rules to understand your rights in relation to a platform.
Contact us if you want to check which regulatory regimes apply to your product.
What do Steam, Epic Games Store and GOG check in game terms?
None of the major platforms publishes an exhaustive checklist of terms requirements in Polish. However, platform documentation and current law provide a minimum set of elements. Without them, your game may fail review or be removed after publication.
Requirements by platform
| Criterion | Steam | Epic Games Store | GOG |
|---|---|---|---|
| Governing document | Steam Subscriber Agreement (SSA); the game EULA must not conflict with the SSA. | Epic Store EULA, which takes precedence over the game EULA. | GOG User Agreement and Code of Conduct, in force since 17 February 2024. |
| Age rating | Required, IARC or another rating. | IARC rating required before publication. | Required. |
| Consistency between description and game | Description and materials must not mislead; Valve checks them during review. | Promotional materials must meet at least ESRB 10+ standards. | Description must match the actual content. |
| Prohibited content | Malware, content breaching payment-operator rules and “extreme” content. | Gambling, realistic violence, sexual content and content for children under 13. | Hate speech, pornography, warez, piracy, gambling and sale of in-game items. |
| Sanctions for a breach | Game removal and developer-account suspension. | Rejection or removal from the store. | Content demotion, warning, temporary suspension or permanent ban. |
| Review time | 3 to 5 business days for the store page; recommendation: submit 7 days before release. | Before publication; no public SLA. | Before publication; no public SLA. |
Minimum contents of game terms
Based on platform requirements and current law, your terms should include at least:
- Business identification: name, address, KRS, NIP, email address and telephone number.
- Main features of the service: license type, term, scope of use, technical requirements, internet requirements, available modes and paid features.
- Payment and delivery terms: currency, when payment is collected, refunds and withdrawal, complaint procedure and 14-day complaint response deadline.
- Prohibited behavior and sanctions: cheats, exploits, automation software, hate speech, malware and piracy.
- A link to a privacy policy compliant with GDPR.
- Age rating, minimum user age and parental controls.
- Rules for community features and UGC: prohibited content, sanctions and appeals, as required by the DSA.
Real examples of games removed from platforms
Platform removal is not hypothetical. Documented examples include:
- Disney, April 2025: 15 Steam games were removed without warning, including classic Star Wars titles.
- Sega, December 2024: more than 60 classic games were removed from major platforms, including Steam, PlayStation Store, Xbox Store and Nintendo eShop.
- Electronic Arts/Codemasters: six games were quietly withdrawn from Steam without a publisher comment.
- Steam payment-operator policy update: after adding a ban on content violating payment operators’ rules, including Mastercard’s rule 5.12.7, dozens of “extreme” titles were removed.
Valve, Sony, Microsoft and Nintendo do not publish annual statistics on game removals. There is also no Polish case law directly addressing the validity of account blocks on gaming platforms. Your practical protection is therefore terms consistent with platform requirements and the law before you submit a build for review.
How to structure monetization under consumer law
Monetization is where the written terms most often diverge from how a game actually works. The terms are drafted in pre-production, while the monetization model changes with every season. The result: the rules on paper do not match what the player sees in the in-game store.
Map every revenue stream
Before drafting terms, list every revenue-generating mechanic:
| Monetization mechanic | What the terms must cover |
|---|---|
| Microtransactions, such as skins and currency | Clear price, transaction currency, when payment is collected, complaint rules and whether the currency can be exchanged for money. |
| DLC and story expansions | Content description, requirements such as owning the base game, and withdrawal rules. |
| Subscriptions, such as a battle pass or VIP plan | Billing period, automatic renewal, cancellation procedure and what happens to content when the subscription expires. |
| Loot boxes and random mechanics | Notice of the random nature, no guarantee of a specific item and complaint rules. |
| In-game store | Purchase terms, virtual-currency refunds and spending limits, especially for minors. |
Loot boxes: legal position in 2026
In a 2019 position, Poland’s Ministry of Finance concluded that games with loot boxes do not meet the definition of any gambling activity in the closed list under the Gambling Act. Virtual items from boxes are not prizes in kind because they are part of the game and cannot lawfully be exchanged for real financial benefits. But the issue is not closed:
- Belgium’s Gaming Commission classified paid loot boxes as gambling. Many publishers disabled paid boxes in Belgium.
- A European Parliament resolution of 18 January 2023 called for a common EU approach and a ban on gambling-like mechanics aimed at minors.
- A November 2025 Parliament report called for banning loot boxes for children under a planned Digital Fairness Act.
- Empirical data cited in the source put global loot-box spending at about USD 30 billion in 2018. A Polish Catholic University of Lublin study found a correlation of r = 0.57 between risky loot-box use and scores on a problem-gambling scale.
For your studio, even if loot boxes are currently outside Poland’s Gambling Act, the terms should clearly disclose their random nature. Lack of transparency can be alleged to breach consumer-information duties regardless of gambling classification.
Chargebacks: how to reduce the risk
Unclear microtransaction rules generate chargebacks. A chargeback has a double cost: refunding the purchase, paying a chargeback fee and risking a payment-processor flag, which may lead to higher fees or a blocked merchant account. To reduce the risk:
- Clearly state in the terms what the player buys and what they cannot demand, such as a refund of virtual currency after it has been used.
- Obtain purchase confirmation that explains the loss of the withdrawal right, after meeting the three statutory conditions.
- Make the complaint procedure available in the game interface. Players with an easy complaint route are less likely to use chargebacks.
- Keep transaction logs. If there is a payment-processor dispute, you need evidence of consent and notice.
Community and UGC: moderation rules under the DSA
A game Discord with 50,000 users, an in-game forum, a review system or player-created mods are all UGC. As the operator, you are responsible for managing the community rules.
Who is the “intermediary service provider” under the DSA?
The distinction matters:
| Community channel | Who provides the intermediary service? | Your role |
|---|---|---|
| Forum on the game website | You, the publisher/operator. | Hosting-service provider with full DSA duties. |
| In-game chat | You, the publisher/operator. | Hosting-service provider with full DSA duties. |
| Discord server | Discord as the global operator. | Server administrator operating under Discord’s policies. |
| Steam comments | Valve as platform operator. | Limited control; you can moderate using Steam tools. |
What you need to implement
The DSA creates a cascading set of duties. For a studio that operates a forum or in-game chat, this includes:
- A point of contact for supervisory authorities and users.
- Terms of service stating what is allowed and prohibited, while respecting users’ fundamental rights.
- A mechanism for reporting illegal content, a “notice and action” procedure in which a user reports and you respond.
- Reasons for moderation decisions. If you remove a post or block an account, explain why.
- An appeal procedure so users can challenge moderation decisions.
- Protection of minors. The DSA prohibits profiling-based advertising to minors, which indirectly limits targeting loot-box offers to children.
Community Guidelines: what they should cover
- Prohibited conduct: hate speech, harassment, threats, spam, fraud, phishing and publication of personal data.
- A graduated sanctions scale: warning, temporary mute, temporary suspension and permanent suspension.
- An appeal procedure against sanctions.
- Rules for mods and player-created content, including licenses, responsibility and the right to remove content.
- Rules for events, contests and beta tests, with separate terms where needed.
Mobile games: how App Store and Google Play requirements differ
If you plan a mobile release, account for another layer of rules. Games distributed through the App Store and Google Play face more formal requirements than PC or console games.
| Criterion | App Store (Apple) | Google Play |
|---|---|---|
| Payment system | In-App Purchase is mandatory for digital products. | Play Billing is mandatory for digital products. |
| Rules for children | Separate requirements for apps in the “Kids” category, including restrictions on ads and data collection. | Parental-control rules and limits on gambling mechanics. |
| Metadata and description | Strict requirements for description, screenshots and age rating. | Requirements for description, rating and privacy policy. |
| Gambling rules | Simulated gambling is prohibited in apps for children. | Gambling apps are prohibited unless licensing requirements are met. |
| Accessibility | Accessibility support, including VoiceOver and Dynamic Type. | Accessibility support, including TalkBack and text magnification. |
There is an additional Polish requirement: the Act of 26 April 2024 on Ensuring Accessibility. The deadline to adapt digital products and services expired on 28 June 2025. It also applies to mobile games offered on the Polish market.
Implement terms in the product as UX, not just a PDF
Terms available as a PDF on the store website do not effectively protect you. Acceptance must be legally effective, which requires integrating it into the user journey:
- Account registration: an unchecked box with an active link to the terms and privacy policy. The player must take an affirmative action.
- First in-game purchase: inform the player about loss of the withdrawal right before delivering digital content. Label the final order button “order with obligation to pay” or an equivalent phrase.
- Terms updates: notify players in-game of changes, the effective date and how to read the new text before accepting it.
- Community: show the rules in the forum/chat interface, not hidden in a settings submenu.
- Beta tests: use separate terms covering NDA and confidentiality, accepted before access to the build is granted.
Connect terms updates to the product-development cycle
Game terms become outdated with every new feature. A new battle-pass season, monetization mechanic, game mode or Discord community should trigger a legal review. Recommended process:
- Each feature that changes monetization, accounts or community triggers a review for consistency with the new mechanic.
- Entering a new distribution platform triggers a check against its requirements.
- Expanding to new markets triggers localization and review under local law, such as California’s CCPA or the EU Digital Content Directive.
- Changing the business model, for example from premium to free-to-play, calls for rebuilding the terms from the ground up.
- Changes in law trigger regulatory monitoring and timely updates.
Penalties and consequences: what does having no terms cost?
| Authority or source of risk | Sanction | Basis |
|---|---|---|
| UOKiK | Up to 10% of annual turnover. | Consumer-rights violations under the Act on Competition and Consumer Protection. |
| UOKiK: management liability | Up to PLN 2 million per person. | Personal liability of management-board members. |
| UODO (GDPR) | Up to EUR 20 million or 4% of global turnover. | Personal-data processing violations. |
| Distribution platform | Game removal or developer-account suspension. | Violation of platform terms. |
| Payment processors | Higher fees, account flags or merchant-account blocking. | Excess chargebacks or breach of processor rules. |
| Players | Chargebacks, mass complaints and negative reviews. | Unclear monetization rules and no complaint procedure. |
In 2024, UOKiK opened an explanatory proceeding concerning game-distribution platforms, including PlayStation Store and Steam. As of the article’s preparation date, no final decision setting specific penalties for gaming entities had been issued. The proceeding itself signals increased regulatory scrutiny of the sector.
For comparison, UOKiK fines totaled PLN 937 million in 2024 and PLN 1.15 billion in 2025. The regulator has both the tools and the willingness to use them.
How we can help
Game and platform terms are not one document. They are a connected system of rules that must match the product model, distribution-platform requirements and applicable law. We help gaming studios and publishers organize that system.
Our approach includes:
- Auditing existing terms to check that they describe what the game actually does, including mechanics, monetization and community, rather than a template copied from another product.
- Checking platform compliance across Steam, Epic Games Store, GOG, App Store and Google Play before submitting a build for review.
- Designing monetization rules for each revenue stream, including microtransactions, DLC, subscriptions and loot boxes, under consumer and digital-content law.
- Preparing community and moderation rules, including DSA-compliant Community Guidelines, reporting and appeals, and UGC terms.
- Cross-checking game terms, privacy policy, complaint rules, contest terms and marketing communications.
- Advising how to integrate terms into the user journey so acceptance is legally effective.
We do not create documents “just in case.” We design rules where risk or value actually arises, from development through sales.
Game terms are product infrastructure: what to do now
Game terms are not a formality to tick off before launch. They are an operational layer that affects whether a game passes platform review, whether monetization generates chargebacks and whether the community becomes a reputational crisis.
Three things to do now:
- Compare the terms with the current product. If you added a monetization mechanic, game mode or community channel since the last update, the terms are outdated.
- Check platform requirements before submitting a build for review, not afterward.
- Map every monetization stream and verify that each has clear purchase, complaint and withdrawal rules.
Frequently asked questions
Can terms copied from another game and adjusted “by eye” really put a studio at risk?
Yes. The most common problem is a mismatch between the terms and how the game actually works. Another product’s terms do not describe your monetization mechanics, community model or technical requirements. Platforms check whether the description matches the game, and UOKiK assesses whether consumer-information duties were met for that product. A copied template meets neither test.
What does Steam check during review, and what can cause a rejection?
Valve checks that the game launches properly, does not perform malicious actions and that the store page matches the actual game without misleading descriptions or materials. The game EULA must not conflict with the SSA or statutory consumer rights. Standard store-page review takes 3 to 5 business days. Inconsistency with the SSA, missing age rating or content violating payment-operator rules may lead to rejection or removal.
Do I need separate terms for the game, in-game store, community and contests?
Not necessarily separate documents, but separate sections or attachments. Game terms should cover product use, including monetization. Community Guidelines are worth making a separate document because the DSA requires clear moderation rules with reporting and appeals. Contests, beta tests and events need separate terms because they rely on different rules, including gambling law for prize contests and an NDA for beta tests.
How often should I update the terms when adding features?
Every new feature affecting monetization, user accounts or the community should trigger a legal review. A new battle-pass season, in-game currency or forum may make the terms inconsistent with the product. For games supplied continuously, such as games as a service, review quarterly or after each major update.
Who on the board may be personally liable for consumer-law violations?
Management-board members may face personal liability. The President of UOKiK may fine a manager up to PLN 2 million for intentionally allowing a breach of collective consumer interests in the performance of their duties. Examples include systemic failures to provide required information, unclear monetization rules or no complaint procedure.
Are loot boxes in my game covered by gambling law?
As of the article’s preparation date, no, under the Finance Ministry’s 2019 position. Virtual items from boxes are not prizes in kind under the Act. That interpretive position may change. The European Parliament’s 2023 resolution and 2025 report called for a ban on loot boxes for children. Regardless of gambling classification, consumer law requires clear information about price and product characteristics, including the random nature of the mechanic.
