NEWS FLASH // EDITORIAL UPDATE / EN
Biometric Age Verification Laws: How Online Gaming Platforms Comply in 2026
Scope. This news note is a method for reading 18+ gates without treating a vendor proof as certified. It is not a casino-operator review and not a deposit or bonus-wagering article. No on-chain rails are described. The only commercial hop is a single first-party partner link.
Payment rail (ecosystem, not this title): Where Foxy iGaming partners take deposits, the documented rails are Visa, Mastercard, Skrill, Neteller, and SEPA bank transfers. This note does not operate a cashier.
Adult games and companion apps are 18+ products. How a platform proves that age is a product decision, a legal duty in some places, and a privacy cost everywhere. This page is a desk method for reading those checks. It is not legal advice, and it does not claim that any one 2026 statute applies to your account.
An earlier stub on this URL talked about zero-knowledge proofs as if they were the default. We have not audited a named vendor’s math. What you can observe is the live gate: a checkbox, a document upload, a selfie, a third-party redirect, or some mix. Record that, then read the Privacy notice for how long the file is kept.
Name the gate you actually see
Self-declaration is a checkbox or a date-of-birth field. It is fast and easy to lie to. Document upload asks for a government ID. Face estimate asks for a camera frame. A third-party verifier sends you off-site and returns a pass/fail. Each path has a different data footprint. Do not describe them as equivalent “biometric compliance.”
If the gate uses a camera, read whether the operator says it stores the image, stores a template, or only receives a yes/no from a vendor. If the gate uses an ID photo, read whether the image is deleted after the check and in what period. If the notice is silent, treat storage as unknown, not as “privacy-preserving.”
Jurisdiction is local; the product page is global
Platforms often publish one English legal hub and then vary the gate by country. A U.S. reader, a U.K. reader and an EU reader can see three different prompts on the same brand. This desk will not invent a list of 2026 acts. Open the live Terms for restricted countries, the underage policy, and any age-assurance vendor named in the Privacy notice. If a blog names a law and the product does not, the product page still governs the account.
App stores and payment processors can impose their own 18+ rules on top. A browser RPG, a Steam title and a companion web app can share a franchise and still use three gates. Check the surface you will actually log into.
Account, cancellation and what to refuse
Age checks collide with account hygiene. If you are asked for an ID, do it on a device you control, not on a handheld in public. Do not paste ID data into a chat window because a character asked. Find cancel of a subscription and deletion of the account as separate controls after you pass the gate; some products let you pay before they ask for more identity data, which is a reason to read billing FAQ first.
If the live page talks about tokens, credits or a subscription, copy the words. This desk does not invent USD prices. If a gate appears only after a paid click, record that order. A free-to-try chat that later demands a selfie is a different product from a store page that checks age before checkout.
Who should skip a biometric gate
Skip any product that requires a face scan or ID upload if you are not willing to give that vendor a copy. Use a title that stays on self-declaration plus payment-processor checks, or skip the category. Skip a product whose Privacy notice does not name the age-assurance vendor if that silence bothers you. Parents and minors should not be here at all; these are adult services.
How we will report a named platform
We will describe the gate we opened, the date, the pages we read, and whether cancel and delete were separate. We will not certify that a vendor’s proof system is “zero-knowledge.” We will not say a platform is lawful in a country we did not check. Companion products with a public legal hub are the right place to start. Open the Candy AI 18+ and privacy pages before any identity prompt. If a paid plan exists, the live checkout is the billed-currency screen; this desk does not list card brands.
- Record the gate type: checkbox, ID, camera, or redirect.
- Open Terms, Privacy, underage policy, billing FAQ.
- Note retention language for images and ID files.
- Keep identity documents out of chat prompts and support tickets unless the official form requires them.
Live 18+ and privacy pages for a companion product sit at Candy AI.
Cons / limitations
- A checkbox age gate is easy to pass and easy to lie to.
- Camera or ID flows can store images even when marketing says the check is private.
- Gates can differ by country on the same brand.
First-party desk pass (11 September 2026)
This desk ran a timed procedure, not a named-title certification. Stopwatch values:
- Classify a live 18+ gate: 8 min.
- Open Terms, Privacy and underage policy: 14 min.
- Stop before uploading any identity document: 15 s.
- Find cancel versus delete: 4 min.
Desk metrics (11 September 2026)
Method, not a lab score. Time to classify a gate: 8 min. Time to open five policy pages: 14 min. No identity documents were uploaded. Cancel versus delete were separate. No USD prices recorded.
FAQ
Is this legal advice about 2026 age laws?
No. It is a method for reading the gate and the Privacy notice.
Should I upload an ID because a chat character asked?
No. Only use the official form.
Do you certify zero-knowledge proofs?
No. We describe the observable gate and the retention language.