Fraud & data security
Customer support

Protect your revenue and stay compliant in Brazil with Xsolla Parental Controls

August 19, 2026•4 min
missing image

What Brazil’s Digital ECA means for game developers

Brazil’s new digital child protection law, Lei 15.211/2025 (ECA Digital), introduces new requirements for game developers selling to players. Enforceable from March 17, 2026, the law requires digital businesses to:
  • Verify the user’s age
  • Not accept self-declared age
  • Get parental consent for users under 18
  • Block loot boxes and randomized rewards for users under 18, even with parental consent
For developers and gaming studios, this creates a new operating environment in Brazil. The country accounts for almost 37% of LATAM gaming revenue and has a large, highly engaged player base that widely uses local payment methods such as Pix, Parcelado, and digital wallets. Until now, checkout systems were primarily designed to optimize conversion: reduce friction, support local payment methods, and keep transactions fast. With these new requirements, payment flows optimized purely for conversion are no longer sufficient. Checkout must now act as a real-time enforcement point for age, identity, consent, and content eligibility. Instead of requiring developers to troubleshoot new stacks and solutions, Xsolla Pay Station includes built-in parental controls to help them meet Brazil’s regulatory requirements by handling age verification, parental consent, and purchase enforcement at checkout.

Stay ahead of new regulations in every market

Most fraud and compliance tools sit outside the checkout, leaving developers to manage separate systems. Pay Station’s Parental Controls run inside the payment flow itself, enforcing Brazil’s age and purchase requirements the instant a transaction happens. Additionally, the Xsolla Merchant of Record model gives you the tools to manage features like guardian consent and age verification at checkout, so you can:
  • Keep operating in the market without geo-blocking or removing features.
  • Maintain stable conversion with compliance built into checkout rather than layered on top.
  • Reduce engineering and legal overhead by avoiding region-specific systems.
  • Deliver a consistent checkout experience where Brazil behaves as a localized extension of their global setup.
For studios, this means staying live in Brazil without changing how you manage your global checkout. How Xsolla Parental Controls work at checkout Powered by the Xsolla Anti-Fraud feature, Parental Controls handles Brazil’s age verification requirements through automated systems that run within each step of the checkout process: 1. Reliable age verification at first purchase. Every user is verified at checkout using CPF validation and live face matching through a certified verification partner, meeting the requirement for reliable age verification without relying on self-declared age. Users are identified by IP at the time of purchase, so the correct verification process is applied only when required.
2. Automated parental consent workflows for minors. If a player is identified as under 18, the system automatically triggers a guardian consent flow:
  • Guardian email capture directly in checkout
  • Identity and age verification for the guardian
  • Consent request and approval process in Portuguese
  • Secure storage of consent status tied to the user and project
This flow is operated end-to-end by PRIVO, a kidSAFE Seal Program-certified provider and COPPA Safe Harbor operator, ensuring the compliant handling of parental consent workflows. 3. Real-time loot box enforcement. Brazil prohibits loot boxes and randomized rewards for users under 18, even with parental consent. Xsolla enforces this at checkout by enabling you to flag randomized items through the dashboard, Catalog API, or purchase token. Pay Station also automatically applies the restriction to under-18 users across accounts, devices, and sessions, with no additional integration. 4 . No repeat verification needed. Verification and consent are saved for each user and project, not each device. They carry across devices and logins; users only need to verify again if their consent changes or re-verification is legally required.

Streamline your business’ global compliance with Xsolla

Brazil won't be the last major global gaming market to enforce regulations like these. If you're building for a global player base, similar regulations on minors, randomized rewards, and digital payments are already underway across LATAM, Europe, and Southeast Asia. Getting ahead of that now is easier than retrofitting compliance market by market as each one lands. With Xsolla Parental Controls, you can keep your existing checkout and sell in Brazil without adding new tools or processes. And with Xsolla as your Merchant of Record, the responsibility for the transaction sits with us. Your team doesn't need to take on new integrations, legal work, or extra headcount to make it happen. If you don’t already use Xsolla, talk to one of our experts about adding Xsolla Pay Station to your checkout and meeting global compliance requirements, or create a Publisher Account to get started now.
Featured articles
missing
How Xsolla Pay drives repeat spending in gaming
missing
Protect your revenue and stay compliant in Brazil with Xsolla Parental Controls
Popular
Xsolla launches Buy Button for mobile gamesIt’s official: Mobile developers can now link players directly to web shops from their games in the U.S.Web Shop features that boost LTV, improve retention and more

Explore our
latest articles

Xsolla Blog
Expert guidance on growing your gaming business
Xsolla Newsroom
Industry insights, expert interviews, latest news, and more
Contact us

Talk to an expert

Ready to maximize revenue opportunities? Reach out to our experts and learn how to start earning more and spending less.

By submitting this form, you consent to Xsolla contacting you in response to your inquiry.

You can unsubscribe at any time. For more information, please read our Privacy Policy.