The EU Kids Act Would Ban 'Addictive' Game Design — Here's What It Actually Requires

On September 17th, the European Commission formally adopted the EU Kids Act proposal — formally titled "EU Keeping Internet Digital Spaces Accountable and Trustworthy" — a sweeping child-safety regulation that treats online games the same as social media and AI chatbots. The proposal bans "addictive design" mechanics that reward engagement at regular intervals or penalize players for missing daily windows, restricts loot boxes and other randomized-reward systems for anyone under 18, and requires every app store to publish age-rating methodology and enforce it. It's not final law yet — it heads to the European Parliament and Council next — but Brussels has made its target list explicit, and mobile games are on it.

The headline mechanic is age verification. Self-declared birthdates, the industry standard for over a decade, are no longer considered sufficient. Platforms and games with online components will need "certified age verification" — options include zero-knowledge-proof systems that confirm a user's age bracket without exposing identity, and a free EU-wide verification app the Commission plans to ship by the end of 2026. Every member state must offer at least one free verification method, and app stores themselves are on the hook to enforce age ratings, not just display them.

The addictive-design language is broad enough to worry any studio running daily rewards, streaks, or login bonuses — mechanics that describe a huge share of free-to-play mobile games, including plenty that have nothing to do with gambling-adjacent loot boxes. Enforcement isn't symbolic either: the act includes 90-day fast-tracked investigations and fines of up to 6% of a company's global annual revenue.

The proposal sets no compliance deadline, and the "addictive design" language is vague enough that regulators — not the text itself — will end up drawing the line between a standard daily login bonus and a banned dark pattern. That ambiguity lands on top of an already crowded EU regulatory calendar: this is the same month Google settled a £260M UK antitrust claim over Play Store fees, and it follows the EU's Digital Markets Act forcing Apple and Google to open up app distribution. Brussels isn't done reshaping how mobile games reach players and get paid.

Anahata doesn't have any EU-facing titles in active development right now, so there's no immediate compliance burden. But daily rewards, streaks, and login bonuses are exactly the kind of engagement mechanics that describe plenty of self-publishing, ad-funded casual and idle games — including the kind we build. The practical takeaway isn't panic, it's documentation: know why an engagement mechanic exists and what problem it solves for players, because "addictive design" is going to get defined through enforcement actions, not through the text of the law.