Since 2010, the Global Law Experts annual awards have been celebrating excellence, innovation and performance across the legal communities from around the world.
posted 3 hours ago
If you are planning how to launch an online gaming platform in India in 2026, every step you take before go‑live is now shaped by a single piece of legislation: the Promotion & Regulation of Online Gaming Act, 2025 (Act No. 32 of 2025) and its subordinate Promotion and Regulation of Online Gaming Rules, 2026, which came into force on 1 May 2026. Together, these instruments created a central registration requirement, tightened the definition of “online money games,” and imposed binding obligations on platform operators covering KYC, payments, advertising and data retention.
This guide walks founders, general counsel, CTOs and investors through the full regulatory process, from product classification to post‑launch reporting, with the documents, timelines and indicative costs needed to move from concept to compliant, live operations.
The 2025 Act draws a sharp line between two categories of online game. A permissible online game, broadly, a game of skill with no monetary stake, falls outside the mandatory registration regime. An online money game, defined as any game offered over the internet where a player deposits money or money’s worth and stands to win money or money’s worth, must be offered only by a registered operator. The distinction matters because it determines the gaming platform regulatory requirements that apply to your product.
Under the Rules 2026, every entity that hosts, operates or makes available an online money game to users in India must register with the central Online Gaming Regulatory Authority (OGRAI) before accepting deposits or going live with paid features. This applies equally to Indian‑incorporated companies and to foreign operators that target Indian users, the latter must appoint a local authorised representative and comply with Indian tax, payment‑processing and data‑retention obligations.
Platforms that function purely as distribution storefronts, listing third‑party skill games without handling player funds, occupy a narrower compliance band, but industry observers expect OGRAI to scrutinise any intermediary that processes payments or influences game outcomes. The safest approach is to obtain a written classification opinion from qualified TMT counsel before committing development resources, and to treat the registration track as the default unless clearly exempt.
For operators already live before 1 May 2026, the Rules provide a transitional window to apply for registration. However, the Act’s penalty provisions, including blocking orders and financial sanctions, apply from commencement, making early engagement with the process essential. Practitioners looking for TMT practice area guidance will find detailed regulatory mapping across multiple jurisdictions on this site.
Before you begin the formal application, confirm that your venture meets every threshold the Rules 2026 and the Act impose. Eligibility for online gaming licensing in India turns on corporate structure, director fitness, technical readiness and financial controls.
The applicant must be a company incorporated under the Companies Act, 2013, or a limited liability partnership registered in India. Foreign operators may apply through an Indian subsidiary or branch office, but must also appoint a resident authorised representative who accepts service of notices on the operator’s behalf. A sole proprietorship or unregistered partnership is not eligible.
Each director and every person holding a beneficial interest of 10 per cent or more must satisfy fit‑and‑proper criteria. The Rules require disclosure of criminal records, prior regulatory actions and financial standing. Directors must hold a valid PAN and, for Indian residents, Aadhaar. Foreign directors must provide passport‑certified identification and police‑clearance certificates from their country of residence.
Register for GST before applying to OGRAI, the supply of online gaming services attracts GST, currently levied at 28 per cent on the full face value of bets placed in online money games. Obtain a PAN for the entity and ensure the company maintains a designated bank account with an Indian scheduled bank. Payment service providers (PSPs) and banks will require completed KYB (know‑your‑business) documentation before they begin onboarding, prepare these in parallel.
The Act empowers OGRAI to notify a list of prohibited games. Before committing to a product roadmap, confirm that none of your proposed titles falls within a prohibited category. Where classification is ambiguous, obtain a written opinion from counsel and retain it as part of the registration file.
The procedure below consolidates the requirements of the Promotion & Regulation of Online Gaming Act, 2025 and the Rules 2026 into a six‑step launch sequence. Each step identifies who is responsible, the key deliverables and the typical duration. A summary timeline table follows the narrative steps.
Who: Product owner and external TMT counsel.
Document every game title the platform will offer. For each title, prepare a classification memo that analyses whether the game is predominantly skill‑based or constitutes an online money game under the Act. The memo should set out the game rules, the role of chance, any odds mathematics, and the nature of stakes. Include draft player‑facing disclaimers. This deliverable is the foundation of your entire compliance file, OGRAI reviewers will examine it, and PSPs will request it during payment onboarding. Allow 1–2 weeks.
Who: Company secretary or corporate‑services advisor.
If you have not already incorporated an Indian entity, do so now. File for incorporation with the Registrar of Companies (ROC), obtain a PAN and register for GST on the government portal. Foreign operators should incorporate an Indian subsidiary or register a branch office and appoint the required local authorised representative. Open a designated bank account with an Indian scheduled bank and begin preliminary KYB discussions with at least two PSPs. Typical duration: 2–6 weeks, depending on ROC processing and bank KYB timelines.
Who: Legal and compliance team, supported by external counsel.
This is the core licensing step. Submit the registration application through the OGRAI portal (or designated filing mechanism) together with the full supporting‑document bundle detailed in the Required Documents section below. The application must include:
OGRAI may raise queries or request supplementary information. Respond within the time frame specified in the deficiency notice to avoid delays. The likely practical effect is that well‑prepared applications with complete documentation will clear review faster than piecemeal submissions. Allow 4–12 weeks from submission to provisional registration, depending on application completeness and OGRAI workload.
Who: CTO and accredited external security auditors.
Run this step concurrently with Step 3. Commission an independent penetration test of the platform’s production environment and prepare a remediation report for any critical or high‑severity findings. Where the platform uses a random‑number generator (RNG) to determine game outcomes, obtain a fairness certification from a recognised third‑party testing laboratory. Document the platform’s logging architecture, the Rules 2026 require operators to maintain detailed transaction logs and to retain those records for the period specified by OGRAI (industry observers expect a minimum retention period of five to seven years, consistent with anti‑money‑laundering norms). Prepare evidence of age‑verification controls and geo‑blocking for prohibited states. Duration: 4–8 weeks.
Who: Finance and payments operations team.
PSP and bank onboarding is frequently the longest single bottleneck in the launch timeline. Begin informal discussions at Step 2, but formal onboarding typically cannot complete until OGRAI issues at least a provisional registration acknowledgement. Key deliverables include:
PSPs may impose additional requirements, including reserve‑amount holdbacks and elevated chargeback thresholds, for gaming‑sector clients. Build these costs into your financial model. Duration: 4–12 weeks.
Who: Compliance officer, legal team and product lead.
Before going live, complete a formal internal compliance review against the Rules 2026 checklist. Confirm that player terms and conditions, the grievance‑redressal mechanism, advertising policies and data‑retention systems are operational. Submit a go‑live notification to OGRAI where required, attaching the final evidence bundle. Set up the ongoing obligations calendar: periodic reporting, annual technical re‑audit, advertising‑compliance reviews and incident‑notification procedures. Duration: 1–2 weeks.
| Step | Who does it | Typical duration |
|---|---|---|
| Product classification & internal legal memo | Product owner + external counsel | 1–2 weeks |
| Entity setup and tax registration (PAN / GST) | Company secretary / tax advisor | 2–6 weeks |
| Application to OGRAI (registration / licence) | Legal / compliance | 4–12 weeks |
| Technical compliance & independent audits | CTO + external auditors | 4–8 weeks (concurrent with Step 3) |
| PSP / bank onboarding & payment integration | Finance + PSPs | 4–12 weeks |
| Final compliance review & go‑live notification | Legal + compliance | 1–2 weeks |
| Post‑launch monitoring & reporting setup | Compliance / Ops | Ongoing (daily / weekly reports) |
Operators must assemble a single, audit‑ready document pack that serves four audiences: the regulator (OGRAI), payment service providers, technical auditors and advertising / broadcast‑standards bodies. The table below consolidates every document typically required. Prepare originals and certified copies; digital submissions should be in PDF format unless the portal specifies otherwise.
| Document | Notes (issuing authority, format, validity) |
|---|---|
| Certificate of incorporation and MOA / AOA | Issued by ROC (India) or equivalent foreign registrar; certified copy; establishes legal identity and capacity. |
| Board resolution authorising the application | Issued by company board; signed and certified; nominates authorised signatory and compliance officer for OGRAI. |
| Director / beneficial‑owner KYC (PAN, passport, Aadhaar for Indian directors) | Issued by national ID authorities; certified scans; required by OGRAI and PSPs. Foreign directors: passport plus police‑clearance certificate. |
| GST registration certificate & PAN | Issued by Indian tax authorities; digital copy; GST mandatory for supply of online gaming services. |
| Bank reference / bankers’ comfort letter | Issued by scheduled bank; confirms designated account and KYB status; required by PSPs. |
| AML / KYC policy & player due‑diligence procedure | Drafted by operator, approved by compliance officer; must align with Rules 2026 AML obligations and PMLA requirements. |
| Technical security audit report / penetration test | Issued by accredited external auditor (e.g., CERT‑In empanelled); includes remediation evidence; required for registration. |
| RNG / game‑fairness / algorithm documentation | Issued by game developer or third‑party testing laboratory; certifies randomness and fairness of outcomes. |
| Transaction‑log architecture & data‑retention policy | Operator produced; must show retention period, access controls and server‑location details. |
| Advertising & marketing compliance policy | Operator produced; documents age‑gating, mandatory disclaimers and ad‑channel restrictions per Rules 2026. |
| Sample player T&Cs and dispute‑resolution mechanism | Operator produced; includes grievance‑redressal contact, escalation path and response‑time commitments. |
| Insurance certificates (cyber / operational liability) | Issued by insurer; advisable and may be required depending on licence class; covers data breaches and platform downtime. |
| Evidence of geo‑blocking & user age‑verification flow | Technical documentation and screenshots; demonstrates controls that prevent access by minors and users in prohibited states. |
Keep the document pack in a single version‑controlled repository. OGRAI may request updates at any time, and PSPs will conduct periodic re‑verification. Treat this pack as a living compliance library, not a one‑off filing.
The end‑to‑end timeline to launch a gaming platform in India depends on three variables: how complete your documentation is at the point of filing, how quickly PSPs complete KYB onboarding, and whether OGRAI raises deficiency queries. The scenarios below reflect ranges reported by early applicants and practitioners advising on the new framework.
| Scenario | End‑to‑end time to launch | Key bottlenecks |
|---|---|---|
| Fast track, domestic startup, pre‑assembled docs, accredited auditors | 8–12 weeks | PSP onboarding and tech‑audit scheduling |
| Typical, new applicant, foreign game titles, PSP negotiation | 12–20 weeks | OGRAI review queries; compliance remediation |
| Conservative, complex products, cross‑border settlement, additional state approvals | 20–36 weeks | Bank / PSP risk approvals; regulatory clarification requests |
The regulatory clock starts when OGRAI acknowledges a complete application. Incomplete filings are returned with a deficiency notice, and the clock restarts upon re‑submission. Industry observers expect the authority to publish service‑level targets for review timelines once its operational procedures mature. In the interim, applicants should plan for the “typical” scenario and treat the fast‑track range as achievable only where every document is pre‑assembled and auditors are already engaged.
Two external deadlines merit attention. First, GST registration must be in place before accepting any player deposits, operating without GST registration exposes the entity to penalties under the Central Goods and Services Tax Act, 2017. Second, the transitional window for operators already live before 1 May 2026 is time‑limited; check the Rules 2026 for the exact cut‑off and file well before it closes.
The table below provides indicative cost ranges for the major line items in a platform launch. All figures are estimates based on practitioner experience and market rates; operators should verify the current OGRAI fee schedule and obtain quotes from service providers before finalising budgets.
| Item | Indicative amount (INR) | Notes |
|---|---|---|
| OGRAI registration / application fee | ₹50,000 – ₹5,00,000 | Fee may vary by licence class; verify with the current OGRAI fee schedule published under the Rules 2026. |
| Independent technical audit / penetration test | ₹1,50,000 – ₹15,00,000 | Depends on platform scope; repeat annually or on major change. |
| RNG / game‑fairness certification (per title) | ₹1,00,000 – ₹5,00,000 | Third‑party lab fees; varies by game complexity. |
| PSP / bank onboarding & KYB costs | Variable | May include escrow reserves, holdback percentages and elevated processing fees for gaming‑sector merchants. |
| Legal & compliance setup (one‑time) | ₹2,00,000 – ₹20,00,000 | External counsel, policy drafting, classification opinions and regulator correspondence. |
| Recurring compliance / reporting (annual) | ₹1,00,000 – ₹10,00,000 | Compliance‑officer salary or retainer, monitoring software, annual re‑audit. |
| GST on platform fees | 28% on face value of bets (online money games) | Levied on the full deposit value; consult a tax advisor for set‑off and input‑credit treatment. |
| Corporate income tax | Standard corporate rate (25.17% for domestic cos.; surcharge varies) | Applicable on net taxable income; withholding obligations arise on foreign payouts. |
Two tax points require early planning. First, GST at 28 per cent on the full face value of amounts deposited in online money games, introduced by amendments to the Central Goods and Services Tax Act, 2017, applies regardless of whether the game is classified as skill‑ or chance‑based. Second, cross‑border payments to foreign game developers, technology licensors or affiliate partners may attract withholding‑tax obligations under the Income‑tax Act, 1961; operators should map these flows and seek advice before launch.
The Promotion & Regulation of Online Gaming Act, 2025 and the Promotion and Regulation of Online Gaming Rules, 2026 (effective 1 May 2026) introduced several material changes that reshape how to launch an online gaming platform in India. The key shifts are:
The combined effect is to move India from a fragmented, state‑driven regime to a centralised, compliance‑heavy framework that aligns more closely with regulated‑market models seen in the EU and parts of Asia‑Pacific.
This article was produced by Global Law Experts. For specialist advice on this topic, contact Siddharth Mahajan at Athena Legal Advocates & Solicitors, a member of the Global Law Experts network.
Member
Find the right Legal Expert for your business
Sign up for the latest advisor briefings and news within Global Advisory Experts’ community, as well as a whole host of features, editorial and conference updates direct to your email inbox.
Naturally you can unsubscribe at any time.
Global Advisory Experts is dedicated to providing exceptional advisory services to clients around the world. With a vast network of highly skilled and experienced advisors, we are committed to delivering innovative and tailored solutions to meet the diverse needs of our clients in various jurisdictions.
