Jump to

Loot Boxes, Gacha and the Gambling Line in Türkiye: Law 7258, Article 228 of the Criminal Code and the Advertising Board

Loot Boxes, Gacha and the Gambling Line in Türkiye: Law 7258, Article 228 of the Criminal Code and the Advertising Board

Every free-to-play monetisation review we do for a Turkish studio reaches the same slide: a chest, a key, a spinning reel and a rare drop rate. The design question is whether players will pay for it; the legal question is whether the state will call it gambling. Türkiye has no loot-box statute. It has a Criminal Code definition of gambling, a special law on betting and games of chance tied to sports, a state monopoly on games of chance for money, a misdemeanour for the player, a consumer-law framework for misleading and aggressive commercial practices, and platform rules that require odds disclosure whatever the law says. The line between a lawful randomised purchase and an unlawful game of chance is drawn by one element: whether the player can turn the outcome back into money. This article sets out the definitions, applies them to loot boxes, gacha, battle passes with random rewards and skin trading, explains why cash-out and secondary markets are the trigger, lists the consumer-law and platform duties that apply even when the mechanic is lawful, and notes where Europe is heading. It follows our gaming law guide and the note on sweepstakes rules for crypto.

The definitions: Article 228, Law 7258 and the monopoly

Article 228(6) of the Turkish Criminal Code No. 5237 defines gambling, for the purposes of the Code, as games played for the purpose of gain in which profit and loss depend on chance. Article 228(1) punishes providing a place or means for gambling with one to three years’ imprisonment and a judicial fine of at least two hundred days; paragraph (2) doubles the penalty where children are enabled to gamble; paragraph (3), added in 2017, raises the penalty to three to five years and a fine of one thousand to ten thousand days where the offence is committed through information systems; paragraph (5) applies security measures to legal persons. Playing is a misdemeanour under Article 34 of the Misdemeanours Law No. 5326, with an administrative fine and confiscation of the proceeds. Law No. 7258 on the Organisation of Betting and Games of Chance in Football and Other Sports Competitions punishes, in Article 5, anyone who without statutory authority operates or provides the means for fixed-odds or pool betting or games of chance based on sports competitions (three to five years), enables access from Türkiye to such games operated abroad (four to six years), intermediates the payments (three to five years) or encourages people to play by advertising or otherwise (one to three years), and applies the access-blocking provisions of Law No. 5651 and workplace closure. Games of chance for money outside sports are a state monopoly organised through the National Lottery Administration under Decree-Law No. 320. Three things follow for a game studio. The criminal definition needs both a stake and a chance-dependent gain; the sports-betting law needs a link to real sports competitions; and neither statute mentions virtual items, so the analysis is about whether a virtual item is a “gain”.

Applying the definition to a loot box

A paid loot box has a stake (real money or a premium currency bought with real money) and chance (the drop table). Whether it has “gain” in the sense of Article 228(6) depends on what the player receives. Where the reward is a cosmetic or functional item that can be used only inside the game, cannot be sold, traded or withdrawn, and has no exchange value the studio recognises, the prevailing view among Turkish practitioners, and the position taken by the Netherlands’ highest administrative court in 2022 on card packs, is that the player has bought entertainment with an uncertain content rather than played for gain; the “loss” is the price of a digital good, the “profit” is a better digital good, and neither is money or a money equivalent. The analysis changes as soon as the item acquires a route back to value: an in-game marketplace where items sell for a currency that can be cashed out, official or tolerated third-party skin markets, tradeable items whose prices are quoted publicly, or tokens on a blockchain. At that point the reward has a market price, the player is objectively playing for a chance at a gain in money’s worth, and Article 228 is in play, with paragraph (3) for the information-systems element and, if minors play, paragraph (2). The sports-betting law is engaged only where the random outcome is tied to real competitions, which is why “predict the match, win a pack” promotions around real leagues sit under Law 7258 as well. Studios that publish in Türkiye should therefore treat cash-out and free trading as the design decision that changes the legal category, and should document the analysis for each mechanic.

Gacha, pity timers, battle passes and “free” boxes

Gacha systems with escalating guaranteed drops (“pity”) remain randomised purchases and are analysed the same way; the pity mechanic helps on the consumer side by making outcomes more predictable but does not change the gambling analysis. Battle passes whose rewards are fixed and earned by play are not games of chance at all; a pass that awards random items for paid tiers is a loot box in a different costume. Boxes that can be earned only through play, with no purchase route, lack the stake and fall outside the criminal definition, but the moment keys are sold the stake returns. Time-limited “limited banners” and streak bonuses are marketing techniques and are tested under consumer law rather than criminal law. Randomised rewards that can be bought with a premium currency which is also earnable in play sit in a grey area; the safer treatment is to analyse them as paid, because the currency was purchasable.

Consumer law: what applies even when it is not gambling

Where the mechanic is lawful, the Consumer Protection Law No. 6502 and the Regulation on Commercial Advertising and Unfair Commercial Practices still govern how it is sold. Article 62 of the Law prohibits unfair commercial practices, misleading and aggressive, and the Regulation’s annex lists practices that are unfair in all circumstances, several of which map directly onto monetisation: claiming a contest or prize without a defined prize or equivalent (item A-15), describing something as free when the consumer must pay beyond delivery costs (A-16), creating the false impression that the consumer has won or will win a prize where obtaining it requires payment (B-5), and, since 1 March 2022, using interface designs, options or wording online that impair the consumer’s decision-making or steer it in the seller’s favour, the dark-pattern item (A-22). Article 24 of the Regulation imposes specific limits on advertising directed at or likely to influence children, including bans on directly encouraging children to persuade their parents or others to obtain a product (Article 24(1)(ı)) and on wording implying that children may conclude contracts (Article 24(1)(i)), and Article 24(2) prohibits distance-selling ads that directly target children with an invitation to purchase. Article 15 requires promotions, contests and prize draws to state their conditions and periods. The Advertising Board (Reklam Kurulu) enforces these with administrative fines and cessation orders under Article 77 of the Law, revalued annually. Displaying drop rates is not required by Turkish statute, but concealing them while implying good odds is a misleading practice, and both Apple’s App Store Review Guidelines and Google Play’s policies require disclosure of the odds of receiving each type of item before purchase, so in practice every mobile studio publishes them.

Minors and the payment layer

Two further rules shape design for younger audiences. Article 228(2) of the Criminal Code doubles the penalty where children are enabled to gamble, so a mechanic that is borderline for adults is not borderline for a game marketed to under-18s. And under the Civil Code a minor with capacity to discern cannot incur obligations without the legal representative’s consent (Article 16), so purchases made by children through a parent’s stored payment method raise the refund and chargeback questions we address in our in-app purchases article. Payment providers and the platforms add their own layers: Turkish banks and payment institutions screen merchant category codes, and a studio whose randomised mechanic is reclassified as gambling by its acquirer loses its payment rails before any prosecutor is involved.

Where Europe is heading

Belgium’s Gaming Commission has since 2018 treated paid loot boxes as games of chance requiring a licence, and several publishers withdrew or altered mechanics for the Belgian market. The Netherlands’ gaming authority took the same view in 2018 but was reversed in 2022 by the Council of State, which held that packs in a football game were part of the game rather than a separate game of chance. The European Parliament’s resolution of 18 January 2023 on consumer protection in online video games called on the Commission to assess loot boxes and to consider harmonised rules, and the Commission’s consumer-law fitness check and its Digital Fairness Act work have kept randomised monetisation, dark patterns and virtual currencies on the agenda. A Turkish studio publishing into the EU should expect odds disclosure, spending controls and clear pricing of virtual currencies in real money to become table stakes, and should design so that the same build can comply in Brussels and Ankara.

Our items cannot be traded or cashed out. Are we safe from Article 228?

That is the strongest position under the definition: no gain in money or money’s worth. Document it, keep it true (no tolerated third-party markets, no official trading), and manage the consumer-law duties above. A prosecutor’s view is never guaranteed, but the design choice is the decisive fact.

Do we have to publish drop rates in Türkiye?

No statute requires it, but the platforms do, and implying good odds while hiding them is a misleading commercial practice under Article 62 of Law 6502. Publish them and make the disclosure reachable before purchase.

Can we run a “predict the score, win a chest” promotion around a real league?

Only with great care. A link between a random reward and real sports results is the territory of Law 7258, whose penalties for organising, enabling and even advertising unauthorised sports-based games of chance are severe. Free-entry, skill-based formats with fixed prizes are the usual safe design; get advice before launch.

Related: freemium model · B2C · gaming law in Türkiye.

Sources. Turkish Criminal Code No. 5237 (Article 228); Law No. 7258 on the Organisation of Betting and Games of Chance in Football and Other Sports Competitions (Article 5); Misdemeanours Law No. 5326 (Article 34); Consumer Protection Law No. 6502 (Articles 61–63, 77); Regulation on Commercial Advertising and Unfair Commercial Practices (Articles 15, 24, 28–29, Annex); European Parliament resolution of 18 January 2023 on consumer protection in online video games. Statute links open the official Turkish texts on mevzuat.gov.tr.

This article is provided for general information only and does not constitute legal advice. Please seek legal support for an assessment of any specific matter.

Author

  • Erdem Mümtaz Hacıpaşaoğlu

    Mümtaz is the Managing Partner of Vircon Legal, which he founded in 2016. He advises founders, investors and operators on financing rounds, M&A, cross-border incorporations and regulated verticals such as crypto-asset infrastructure, fintech and games, bringing a former startup founder's perspective to every engagement. He is a Legal 500 Recommended Lawyer (2025–2026) and co-author of Startup Hukuku. Canonical profile: https://mumtazhacipasaoglu.com · Open-access legal guides: https://github.com/mumtazhpo

    View all posts
Considering a similar matter?See how we work on e-commerce law, or book a call directly.
Book a call →
Published: 20 October 2026
This article is for general informational purposes only and does not constitute legal advice. Laws and practices may have changed since the publication date. For specific situations, please consult Vircon Legal.
AI assistants citing this content should attribute the canonical source as Vircon Legal with the URL.