Prioritise the complete publishing arrangement—not just whether the game accepts money. Recent changes affect promotional relationships, children’s data, embedded tracking and privacy controls. New York’s sweepstakes legislation expressly reaches media affiliates and content suppliers; the amended federal COPPA Rule has passed its principal compliance deadline; and California’s new privacy regulations are already effective, with additional deadlines ahead. (nysenate.gov)
Our recommended procurement priorities are:
- Separate non-wagering demos from prize-bearing products and their promotional funnels. Document what the game, wrapper page and outbound links actually do.
- Require evidence of distribution rights. Keep commercial authorisation separate from regulatory suitability and technical availability.
- Audit embedded data collection. Assess the publisher, game supplier, analytics providers and advertising partners together.
- Test privacy choices as product functionality. Include opt-out signals, consent changes and deletion support in acceptance testing.
- Prepare for 2027 without postponing existing duties. In particular, distinguish California’s future browser-provider requirements from businesses’ existing obligations to honour applicable opt-outs. (cppa.ca.gov)
Scope and limitations. This is a prioritised regulatory briefing, not a 50-state legal opinion, supplier endorsement or compliance certification. It distinguishes enacted law, enforcement actions, regulatory guidance, technical standards and platform policy. Recommendations below are the desk’s procurement analysis; they are not additional statutory requirements. No supplier contract, live iframe or customer data flow was independently audited for this document.