Review the whole page and visitor journey, not only the game. Obtain qualified advice where the audience, data collection or promotions create unresolved obligations; this checklist is not a legal opinion.
| Area | Evidence-led action |
|---|---|
| Affiliate disclosures | Check disclosures beside relevant recommendations and links. FTC guidance calls for clear, conspicuous disclosure of material affiliate relationships; the label affiliate link alone may not explain the payment relationship. (ftc.gov) |
| Real-money destinations | Verify linked operators against the relevant jurisdiction’s official information. New Jersey, for example, publishes approved internet-gaming sites; its list is not nationwide approval or a demo-content licence. (njoag.gov) |
| Privacy and tracking | Determine applicable privacy obligations and map actual embedded data flows. California’s regulator explains that covered businesses must honour qualifying opt-out preference signals, including Global Privacy Control, for sale/sharing opt-outs. (cppa.ca.gov) |
| Children’s data | Assess child-directed presentation and actual knowledge of collection from children under 13. FTC guidance explains that COPPA can cover both child-directed services and qualifying general-audience services. (ftc.gov) |
The amended COPPA Rule’s general compliance date was 22 April 2026, with specified provisions subject to different deadlines. That date has already passed as of this report; it should not be presented as an upcoming implementation window. (govinfo.gov)
Privacy and presentation checklist
- [ ] Inventory requests, cookies, identifiers, redirects and third-party recipients during the pilot.
- [ ] Compare observed behaviour with supplier disclosures and contractual commitments.
- [ ] Identify responsibility for user choices, notices, deletion requests and incident escalation where applicable.
- [ ] Review supplier-controlled advertising, promotional buttons and destination changes.
- [ ] Have the appropriate adviser resolve age, audience and promotional questions before public deployment.
Keep three answers separate: the agreement permits the use; the game launched in the tested environment; the page’s presentation and data flows have passed the relevant review.