You can sue a game company, but before filing anything you need to identify a recognized legal ground (false advertising, deceptive microtransactions, breach of contract, a privacy violation, or negligence), check what the end user license agreement forces you to do first, and confirm the deadline hasn’t passed. How to sue a game company is less a single procedure than a sequence of decisions, and the EULA you clicked past on installation usually shapes every one of them.
Start With the EULA
The agreement you accepted when you installed the game decides where and how any dispute gets resolved. Two provisions matter most: arbitration clauses and class action waivers. Major publishers including Epic Games, EA, and Activision Blizzard all include them.
An arbitration clause requires you to take your dispute to a private arbitrator instead of a court. In 2020, a federal court enforced Epic’s arbitration clause against a minor player, ruling that the child acted as an agent for the parent and could bind them to the terms. Epic’s EULA gave players a short window to opt out of arbitration after accepting the agreement, but most players never do because they don’t read carefully enough to know the option exists.
These clauses aren’t bulletproof. In 2023, a California appellate court refused to enforce the arbitration provision in Skillz’s terms of service, finding it unconscionable. The court pointed to the arbitration requirement not being mutual (Skillz exempted its own intellectual property claims), a $50 liability cap, a limitations period shortened by up to 75%, and fee-sharing that imposed unreasonable costs on players. When one-sided provisions stack up, a court may throw out the whole clause.
Enforceability often turns on how the agreement was presented: whether users had meaningful notice, whether they took a clear action to accept, and whether the terms are reasonable. Agreements that bury important provisions in dense legal language or impose lopsided obligations are more vulnerable to challenge. Most EULAs also include a forum selection clause requiring disputes to be filed in the developer’s home jurisdiction. Those are generally enforceable in the United States, though courts have invalidated them when enforcement would effectively deny the consumer any remedy.
False Advertising and Deceptive Marketing
The most common complaint against developers involves trailers, screenshots, and interviews that oversell the finished product. Federal law declares unfair or deceptive acts or practices in commerce unlawful, and the FTC enforces those standards against game companies the same way it does against any other advertiser.1Office of the Law Revision Counsel. 15 U.S. Code 45 – Unfair Methods of Competition Unlawful Advertising must be truthful, not misleading, and substantiated when appropriate, whether it appears in a television spot, a YouTube trailer, or a Steam store page.2Federal Trade Commission. Truth In Advertising
The practical reality is harder than the theory. When Hello Games released No Man’s Sky in 2016 to widespread accusations of false advertising, the UK’s Advertising Standards Authority investigated but ultimately lacked enforcement power, and the FTC took no action. Legal experts noted that many of the most damaging statements had appeared in interviews and Reddit posts rather than official marketing materials, making them difficult to classify as actionable advertising. Vague pre-release hype is hard to sue over. Specific, documented claims in official promotional materials are where real liability begins.
Loot Boxes and Microtransactions
Randomized in-game purchases have drawn heavy regulatory scrutiny. When a developer sells randomized items for real money, players are entitled to know the odds. Misrepresenting or obscuring them is deception.
In January 2025, the FTC reached a $20 million settlement with Cognosphere, the developer behind Genshin Impact, over allegations that the company obscured loot box costs, misled players about the odds of winning featured items, and sold loot boxes to children without parental consent.3Federal Trade Commission. Genshin Impact Game Developer Will Be Banned From Selling Lootboxes to Teens Under 16 Without Parental Consent The FTC found the company used phrases like “Increased Drop Rates!” to market items players had roughly a 0.3% chance of receiving. The settlement requires Cognosphere to disclose loot box odds in plain terms, offer direct real-money pricing instead of hiding costs behind layered virtual currencies, and obtain parental consent before selling loot boxes to anyone under 16.
Epic Games paid $245 million in 2023 to settle FTC charges that Fortnite used dark patterns to trick players into unwanted purchases. Confusing button layouts caused accidental purchases, children could buy items without parental consent, and the company locked accounts of players who disputed unauthorized charges with their credit card companies.4Federal Trade Commission. FTC Finalizes Order Requiring Fortnite Maker Epic Games to Pay $245 Million for Tricking Users Into Making Unwanted Charges That money went directly to affected consumers as refunds.5Federal Trade Commission. Fortnite Refunds
Class action lawsuits have also targeted loot boxes as unlawful gambling, particularly in Canada. Courts have not universally accepted that theory, but the litigation continues. Even where gambling claims fail, deceptive marketing claims about drop rates remain viable under consumer protection statutes.
Breach of Contract
When you pay for a game based on specific promises and the developer doesn’t deliver, breach of contract is the most direct theory. It comes up most often with crowdfunding on Kickstarter or Indiegogo, where backers pledge based on detailed feature lists, release timelines, and gameplay descriptions. If the developer takes the money and ships something materially different, backers may have a claim built on those representations.
Pre-orders work similarly. If a storefront or the developer’s own marketing commits to specific content, editions, or bonuses and then fails to deliver, purchasers have grounds. The challenge is proving a specific promise was made and that the failure was material rather than a minor shortcoming. A game shipped without one of twenty promised features is a weaker case than a game that never ships at all.
Data Privacy Violations
Games collect enormous amounts of personal data: email addresses, payment information, location data, chat logs, play patterns, and in some cases biometric information like facial scans used for avatar creation. Mishandling that data can expose developers to liability under both federal and international law.
In the European Union, the General Data Protection Regulation imposes fines of up to €20 million or 4% of global annual revenue, whichever is higher, for serious violations like processing personal data without a legal basis or failing to obtain proper consent. Less severe violations carry fines up to €10 million or 2% of global revenue. These penalties apply to any developer whose games are accessible to EU residents, regardless of where the company is headquartered.6European Commission. What if My Company/Organisation Fails to Comply With the Data Protection Rules?
In the United States, enforcement is more fragmented. The FTC uses its authority over unfair and deceptive practices to go after companies that violate their own privacy policies or fail to protect user data adequately.1Office of the Law Revision Counsel. 15 U.S. Code 45 – Unfair Methods of Competition Unlawful Several states have also enacted biometric privacy laws that create a private right of action when companies collect facial geometry, voiceprints, or other biometric identifiers without consent. Statutory damages under those laws can reach thousands of dollars per violation, and class action settlements in gaming have already reached into the millions.
Children Under 13
Games accessible to children face another layer of federal regulation through the Children’s Online Privacy Protection Act. COPPA prohibits online services from collecting personal information from children under 13 without verified parental consent. Violations can result in civil penalties of up to $53,088 per violation.7Federal Trade Commission. Complying With COPPA: Frequently Asked Questions Because games routinely collect usernames, email addresses, device identifiers, and behavioral data, developers whose games attract children face real exposure without proper age gates and consent mechanisms.
The Genshin Impact settlement is a clear example of children’s privacy intersecting with monetization. The FTC alleged that Cognosphere knew children under 13 were using its service but continued collecting their personal information and allowing them to make loot box purchases without parental consent.3Federal Trade Commission. Genshin Impact Game Developer Will Be Banned From Selling Lootboxes to Teens Under 16 Without Parental Consent Parents whose children’s data has been collected or whose children have made unauthorized purchases have a particularly strong basis for legal action. In February 2026, the FTC also issued a policy statement encouraging age verification technologies by declining to bring enforcement actions against operators who collect information solely to verify a user’s age, provided they don’t use the data for other purposes, delete it promptly after verification, and maintain reasonable security safeguards.8Federal Trade Commission. FTC Issues COPPA Policy Statement to Incentivize the Use of Age Verification Technologies to Protect Children Online
Negligence and Product Safety
Developers can face negligence claims when their products cause physical or psychological harm. The most established example involves photosensitive seizures triggered by flashing visual effects. Lawsuits over seizure-related injuries date back to the early 1990s, when families argued developers failed to warn players about known risks. Modern games typically include epilepsy warnings at launch, but those warnings don’t necessarily shield a developer if the effects go beyond industry norms or if the warnings are inadequate.
A newer and more contested area involves gaming addiction. Lawsuits have alleged that developers intentionally design games to be addictive, targeting vulnerable players (particularly adolescents and young adults) while failing to warn about the addictive potential. Courts have not consistently recognized gaming addiction as a compensable harm, and the legal theories are still developing. The volume of these lawsuits is growing, and some jurisdictions are more receptive than others.
Virtual reality introduces its own risks. Faulty hardware calibration, inadequate safety boundaries, and motion-sickness-inducing software can all support a negligence claim if a player is injured. If you sell a product that straps to someone’s face and controls their visual field, you have a duty to take reasonable steps to make sure it doesn’t hurt them.
Individually, in a Class, or in Small Claims
Once you have a theory, you have to decide what kind of case to file. Class actions are often the only practical way to hold a developer accountable for widespread harm. When each player’s loss is small (say, $10 in unauthorized microtransaction charges), nobody hires a lawyer over it alone. A class action aggregates those claims and makes litigation economically viable.
The main obstacle is the class action waiver buried in most EULAs, which requires individual arbitration and prohibits class-wide proceedings. Courts enforce these waivers in most situations, though state unconscionability doctrines and certain federal rules can provide grounds to challenge them. If you’re considering joining a class action, an attorney can assess whether the specific EULA at issue is likely to hold up.
For smaller individual claims, small claims court may be an option. Maximum claim limits range from roughly $6,000 to $20,000 depending on the state, and the process is designed to work without a lawyer. Some gaming EULAs even carve out small claims court filings as an alternative to arbitration. If your damages are modest, checking whether your claim fits within your local limit is worth the effort.
European consumers have stronger jurisdiction protections than U.S. consumers. EU rules generally allow consumers to sue in their home country rather than the business’s location, and courts have interpreted these protections to cover digital services and online purchases.9European e-Justice Portal. Which Country’s Court Is Responsible The consumer generally chooses whether to file where the business is based or where they live.10Publications Office of the European Union. Justice and Consumers Jurisdiction and Applicable Law in International Consumer Contracts Practice Guide
What You Can Recover
Damages depend on the theory. In a breach of contract case, the standard measure is expectation damages: the court tries to put you in the financial position you would have been in had the developer kept its promises. If you paid $60 for a game that was supposed to include certain features and those features never materialized, your damages start with the price paid minus the value of what you actually received. You may also recover consequential damages if the breach caused additional foreseeable losses, like wasted subscription fees for a service tied to the game.
Consumer protection claims often provide stronger remedies. Most state consumer protection statutes allow prevailing plaintiffs to recover attorney’s fees, which makes it feasible for lawyers to take these cases on contingency. Some states also authorize treble damages (three times actual damages) for willful or knowing violations. Those enhanced remedies exist because legislators recognized that without them, most consumers would never sue over a $60 game.
For privacy violations, statutory damages can be substantial. Under the GDPR, individuals can seek compensation for both material and non-material damage caused by a violation.6European Commission. What if My Company/Organisation Fails to Comply With the Data Protection Rules? In the United States, state biometric privacy laws provide statutory damages that can reach thousands of dollars per violation, which is why class actions under these laws produce large settlements even when individual harm is modest. Restitution (a full refund of what you paid) is available in most claim types and is often the most straightforward relief.
Filing Deadlines
Every claim has a statute of limitations, and missing it kills your case regardless of how strong the evidence is. Breach of contract claims involving a written agreement generally fall between three and ten years from the date of the breach, depending on the state. Fraud and consumer protection claims typically have shorter windows, often two to four years. If your claim involves a minor’s data or purchases, some states toll the limitations period until the child reaches the age of majority.
The clock usually starts when you knew or should have known about the harm, not when the game was released. If a developer secretly collected your biometric data and you didn’t discover it until years later, the limitations period may run from the date of discovery rather than the date of collection. That is fact-specific and varies by jurisdiction, so sitting on a claim you already know about is always risky.