session controlsUpdated 11 August 2026

Controlling your own play and the controls the Act requires

The Promotion and Regulation of Online Gaming Act, 2025 makes a defined set of controls mandatory on every licensed platform. This desk describes those controls, the grievance mechanism the Act creates, and the things to ask the operator for before and during play. It does not publish a directory of support contacts it has not verified.

A kitchen timer, a notebook and a glass of water on a calm pale surface
A limit you set before you open the app is worth more than one you set during a losing session.
  • Identity and age verificationThe Act requires licensed platforms to verify identity and age, and to exclude minors. The control operates as a gate before the account is funded.
  • Exclusion of minorsA platform cannot accept a deposit or run a prize competition with a minor as the participant. The control is implemented at the verification stage and again at the deposit stage.
  • Self-exclusionA user-driven control that closes the account for a defined period. The Act makes self-exclusion mandatory; the policy window is set by the operator and published in the responsible gaming policy.
  • Time limitsA user-configurable ceiling on the length of a single session or the cumulative play time within a period. The Act makes the control mandatory; the default and the maximum are set by the operator and published.
  • Deposit limitsA user-configurable ceiling on the amount that can be deposited within a defined period. The Act makes the control mandatory; the default and the maximum are set by the operator and published.

Two layers of control

The control the platform owes you, and the control you owe yourself

Responsible play on a real-money gaming platform is the intersection of two kinds of control. The first kind is mandated by law and built into the platform; the second kind is the player's own commitment, made before a session rather than during one. Both layers are easier to set up in advance than to reconstruct after a difficult session.

The Promotion and Regulation of Online Gaming Act, 2025 creates the first layer. The Act requires every licensed platform to verify identity and age, to exclude minors, and to provide self-exclusion, time limits and deposit limits. The Act also creates a grievance redressal mechanism, with an Online Gaming Appellate Tribunal to hear matters the platform cannot resolve, and appeals lying directly to the Supreme Court of India. None of that removes the second layer, which is the player's own. The Act sets the floor; the player sets the rest.

A useful test for any control is the moment it is hardest to apply. A deposit limit set while calm will be tested by a losing session. A self-exclusion set in advance will be tested by a winning session. A time limit set before opening the app will be tested by the third hand. The right controls are the ones that hold at the moment they are tested, which is usually the moment the player least wants them to hold.

What the desk will and will not do here

It will describe the controls the Act mandates, the questions to ask the operator about how each control is implemented, and the structure of the Act's grievance and Tribunal mechanism. It will not publish a directory of helplines, counselling organisations or support agencies, because it has not verified any such directory. Where a reader needs clinical or counselling support, the desk recommends a qualified local medical or counselling professional, the same recommendation a general practitioner would make for any health concern.

The control you set before you need it

Reading the limits table a platform should publish

A responsible gaming policy that names a limit without explaining how to set it is a marketing document. The signals to look for are mechanical.

a printed table of limit settings with pencil ticks

Three signals that the limit setting is operational rather than decorative

01 · A control named with a default and a maximum
A deposit limit policy that names a default and a maximum gives the player two values to choose between. A policy that names only a maximum gives the player no anchor and no idea what the platform considers ordinary.
02 · A defined window for honouring a change
A self-exclusion policy that names a window within which a request is honoured gives the player a verifiable promise. A policy that names no window gives the player no test for non-compliance.
03 · An end-of-control review, not a silent extension
A time-limit policy that explains what happens at the end of the period, and how the player can extend or end the limit, treats the control as a tool rather than a feature. A policy that auto-renews without review is a marketing choice dressed as a safety one.

Before you open the app

Five controls to set in the first ten minutes of a new account

Each step is a control the Act mandates on a licensed platform. The order is the order the desk sets them, and the order they should remain set.

  1. Confirm the identity gate

    Open the platform's verification policy and confirm that date of birth is required and that the platform refuses to proceed if the date is below eighteen. The Act requires exclusion of minors; a platform whose age gate is a checkbox has not implemented the requirement.

    If verification is not complete, do not fund the account. The verification step is the moment the platform stops accepting anonymous sign-ups, and skipping it removes the first layer of the Act's protection.

  2. Set the deposit limit

    Open the responsible gaming settings and set a daily, weekly and monthly deposit limit. Choose a number that reflects what you can lose entirely, not what you can afford to lose today, and choose a number below the maximum the platform allows.

    The Act makes the control mandatory. The default and the maximum are set by the operator and published in the policy. A platform that publishes neither is signalling that the control is decorative.

  3. Set the time limit

    Open the session settings and set a per-session time limit. The right number is one you are willing to honour on the third hand of a difficult session, which is usually a shorter number than you think.

    A platform whose time limit cannot be set below an hour has set its floor above where most responsible play occurs. The Act requires the control; the implementation belongs to the operator.

  4. Understand self-exclusion

    Read the self-exclusion policy before you need it. The window within which a request is honoured should be named; the length of an initial exclusion should be published; the process for lifting an exclusion should be described.

    Self-exclusion is a tool for the moment when a control would otherwise be overridden. Setting it up in advance means the moment arrives at a tool rather than at a question.

  5. Locate the grievance channel

    Find the platform's grievance or complaints page. The page should describe the internal channel and the escalation route to the Online Gaming Appellate Tribunal. If the Tribunal is not named, the platform has not internalised the Act's dispute mechanism.

    Save the page as a PDF with a timestamp. A grievance that begins with a saved document is in a different position from one that begins with a search.

a darkened phone screen resting face up on a table
A phone screen that has gone dark because a time limit has elapsed is a control working as designed. A phone that has gone dark because a session was ended by exhaustion is a control that was never set.

What the Act asks the platform to build

The four mandatory controls beyond identity

Beyond identity and age verification, the Act mandates four controls on every licensed platform. The desk treats each as a separate test rather than as a bundle, because the implementation differs across platforms even where the requirement is identical.

Exclusion of minors operates as a gate. A platform that asks for date of birth and refuses to proceed when the date is below eighteen has implemented the gate. A platform whose age gate is a checkbox has not. The control is binary; there is no half-implementation that satisfies the Act.

Self-exclusion is a user-driven control that closes the account for a defined period. The Act makes the control mandatory. The window within which the platform honours a request, the minimum length of an initial exclusion, and the process for lifting an exclusion are set by the operator and published in the responsible gaming policy. The desk recommends reading the policy before needing the control.

Time limits are user-configurable ceilings on the length of a single session or the cumulative play time within a period. The Act makes the control mandatory; the default and the maximum are set by the operator and published. A platform whose limit cannot be set below an hour has set its floor above where most responsible play occurs.

Deposit limits are user-configurable ceilings on the amount that can be deposited within a defined period. The Act makes the control mandatory. The default and the maximum are set by the operator and published. A player who sets a daily limit at the platform's maximum has not set a limit; the platform has set one.

The control and the question

Five controls, five questions for the operator

The Act mandates the controls. The questions below are the ones to ask the operator before funding an account, because the Act sets the floor and the operator sets the implementation.

The desk does not name operators or publish answers it has not verified. The questions are the questions to ask, not the questions the desk has answered.

Mandatory controls under the 2025 Act and the questions worth asking
Mandatory controlWhat the Act requiresQuestion to ask the operator
Identity and age verificationVerify identity and age; exclude minors.What documents does the platform accept, how long does verification take, and what is the status reported to the user?
Exclusion of minorsRefuse play and deposit by minors.Does the platform refuse to proceed if the date of birth is below eighteen, or does it accept the sign-up and rely on later checks?
Self-exclusionProvide the control on request.Within what window is a self-exclusion request honoured, what is the minimum length, and what is the process for lifting it?
Time limitsProvide a user-configurable session or period ceiling.What is the lowest limit a player can set, what is the default, and what happens at the end of the period?
Deposit limitsProvide a user-configurable deposit ceiling.What is the lowest daily limit a player can set, what is the default, and how is a limit reduction applied immediately?

The grievance route

The path from a platform complaint to the Tribunal

The Act creates a defined escalation route for disputes that the platform's own grievance channel cannot resolve. The route has two stages.

The first stage is the platform's own grievance channel. The Act requires licensed platforms to maintain one. The platform's responsible gaming policy or help pages should describe the channel and the window within which the platform responds. A complaint lodged through the channel, with a saved acknowledgement, is the foundation of any later escalation.

The second stage is the Online Gaming Appellate Tribunal. The Act gives the Tribunal the powers of a civil court, which means it can compel documents and order remedies. Appeals from the Tribunal lie directly to the Supreme Court of India. The Tribunal is the Act's mechanism for matters that the platform's own process cannot resolve, and it sits above the operator rather than within it.

The route is intended to be predictable, which is why the Act names the Tribunal and gives it civil-court powers. A player who follows the route from platform complaint to Tribunal decision has done what the Act expects. A player who relies on tone or persistence alone has not.

What the desk does not publish, and why

The desk does not publish a directory of helplines, counselling organisations, support agencies or ADR bodies for problem gambling. It has not verified any such directory against primary sources, and a published directory it cannot stand behind would do more harm than an honest absence.

Where a reader needs clinical or counselling support, the desk's recommendation is the same recommendation a general practitioner would make for any health concern: consult a qualified local medical or counselling professional. The recommendation is generic because the desk has not verified a specialist one. It is honest for the same reason.

What changed and when

The dated record of the controls and the grievance mechanism

Each entry below is dated from the legislative and judicial record. Nothing here is forecast.

  1. Supreme Court

    Skill classification

    The Court held that rummy is mainly and preponderantly a game of skill, contrasted with the three-card game of pure chance. The classification is about the nature of the game, not about responsible play on a commercial service.

  2. 22 August 2025

    The 2025 Act receives assent

    The Promotion and Regulation of Online Gaming Act, 2025 receives presidential assent. The Act mandates the controls listed in the column at the top, and creates the National Online Gaming Commission and the Appellate Tribunal.

  3. 12 October 2025

    Draft rules published

    MeitY releases the Draft Promotion and Regulation of Online Gaming Rules, 2025 under section 19 of the Act, with the first public view of how the controls and the Tribunal will operate in practice.

  4. 8 September

    Challenges consolidated

    Following a central government petition, the Supreme Court transfers all pending and future challenges to the Act, filed in the Karnataka, Madhya Pradesh and Delhi high courts, to itself. The grievance mechanism is in force; the Act remains under challenge.

  5. 22 April 2026

    Rules notified

    The Government of India notifies the rules under the Act, completing the framework that licensed platforms must implement to operate, advertise and accept deposits.

Reader questions

Questions about session controls and support

Each answer is paired with the Act's text or the rule the Act sets.

Does the Act require platforms to provide responsible gaming controls?

Yes. The Promotion and Regulation of Online Gaming Act, 2025 requires every licensed platform to verify identity and age, to exclude minors, and to provide self-exclusion, time limits and deposit limits.

What is the difference between an in-app control and an external commitment?

An in-app control is one the platform implements through its own settings, and which the operator can observe and enforce. An external commitment is one the player makes outside the platform, such as a notebook with a session log.

Both layers matter. The Act mandates the in-app layer. The external commitment is the player's own. Neither layer substitutes for the other.

What does the Act say about advertising and responsible gaming warnings?

The Act requires that advertisements must not target children and must carry responsible gaming warnings. The requirement applies to licensed platforms' advertising, including in-app and on-site promotion.

What happens if a platform ignores a self-exclusion request?

The Act makes self-exclusion mandatory. A platform that fails to honour a request within the window its own policy publishes is in breach of its licence conditions, and the player can lodge a dated complaint with the platform and, if the platform does not respond, escalate to the Online Gaming Appellate Tribunal.

The Tribunal has the powers of a civil court. Appeals from the Tribunal lie directly to the Supreme Court of India.

Where should I go for clinical or counselling support?

The desk does not publish a directory of helplines, counselling organisations or support agencies, because it has not verified any such directory. The desk's recommendation for clinical or counselling support is the same recommendation a general practitioner would make for any health concern: consult a qualified local medical or counselling professional.

What is the difference between the Tribunal and a court?

The Act establishes an Online Gaming Appellate Tribunal with the powers of a civil court. The Tribunal hears matters that the platform's grievance channel cannot resolve. Appeals from the Tribunal lie directly to the Supreme Court of India. The Tribunal is the Act's own dispute-resolution mechanism.

Companion reading

Where to read next

  • Pre-deposit checks

    The pre-deposit reading

    Identity verification, segregated funds, refundability and the grievance mechanism, in the order the desk reads them.

  • Legal layer

    The legal architecture behind the controls

    State competence, the 1867 Act, the Supreme Court on skill, the 2025 Act and the litigation now before the Court.

  • Single article

    A focused dated piece on the three days the Act spent moving through Parliament and the rules that followed.

  • Dated record

    The broader dated picture of legislative and judicial events in Indian online gaming law.

Before you open the app

Five questions to ask the operator before a first deposit

The Act mandates the controls. The questions below are the ones that turn a mandated control into a working one.

Read the safety page

  • Does the platform's verification policy describe a date-of-birth gate that refuses to proceed if the date is below eighteen?
  • Within what window does the platform honour a self-exclusion request, and what is the minimum length of an initial exclusion?
  • What is the lowest deposit limit a player can set, what is the default, and is a limit reduction applied immediately?
  • What is the lowest time limit a player can set, what is the default, and what happens at the end of the period?
  • Does the platform's grievance policy name the Online Gaming Appellate Tribunal as the escalation route, and what is the platform's own response window?

Sources for the controls and grievance statements above

  • Promotion and Regulation of Online Gaming Act, 2025The mandatory controls on licensed platforms: identity and age verification, exclusion of minors, self-exclusion, time limits and deposit limits; the responsible gaming warnings required in advertising; the National Online Gaming Commission; and the Online Gaming Appellate Tribunal with civil court powers and direct appeals to the Supreme Court of India.
  • Draft Promotion and Regulation of Online Gaming Rules, 2025MeitY's draft rules published on 12 October 2025 under section 19 of the Act, with the first public view of how the controls and the Tribunal will operate in practice.
  • Promotion and Regulation of Online Gaming Rules, 2026The rules notified by the Government of India on 22 April 2026, completing the framework that licensed platforms must implement.
  • Supreme Court of India on rummyThe finding that rummy is mainly and preponderantly a game of skill, contrasted with the three-card game of pure chance. The skill classification is about the nature of the game and is not itself an authorisation of any commercial service.
  • Public Gambling Act, 1867The central prohibition on operating or managing a public gambling house, with the dated penalties that remain in force.

Every control, rule and date above comes from that record. Where a detail is absent, including any specific helpline or counselling directory, this desk states that it has not verified the detail rather than publishing one.