Open a card pack in a major mobile game and the drop rates are there if you look for them. Percentages per rarity tier, listed before purchase.
That has been true for about eight years, and almost nobody remembers why. It was not an industry decision, it was not a platform initiative, and it certainly was not a response to player feedback. It was a rule written in Beijing, adopted by Apple seven months later, and eventually inherited by everyone.
The more interesting question is what happened next, or rather what did not. Publishing a number and having that number checked are entirely different things, and one feature of this story is that games did the first without ever getting round to the second.
Casinos Solved This Decades Earlier
Worth starting here, because it sets the standard the games industry is still not meeting.
Regulated gaming machines publish return-to-player figures, and those figures are not marketing claims. Before a title reaches a floor in a licensed jurisdiction, an independent test house runs statistical batteries against the random number generator, confirms the payout percentage matches specification, and issues a certificate the regulator accepts. The maths is verified by somebody with no stake in the outcome.
That regime has existed in various forms for decades and it varies considerably by jurisdiction, which is the part outsiders underestimate. Requirements in one state can differ substantially from the next, and there's more on Maryland online casinos and how that state's framework compares with its neighbours for anyone who wants the specifics.
Hold that model in mind. Disclosed number, independently certified, jurisdiction-specific. Games have the first part and none of the rest.
How Games Got to Disclosure
The sequence matters and usually gets compressed into "China and Apple," which skips the actual first mover.
Japan went first, on a different question. Rather than mandating disclosure, Japanese regulators went after a specific mechanic, complete gacha, where a set of common items had to be collected to unlock a rare one. Several major developers had already abandoned it before the ruling landed, citing everything from disappointing revenue to a preference for self-regulation.
China wrote the disclosure rule. Ministry of Culture regulations took effect on 1 May 2017 requiring publishers to disclose drop rates for chance-based items. The same package went further than most coverage acknowledges: loot boxes could not be bought with real currency or with virtual currency purchased using real currency, and developers had to publish player spending figures for the preceding 90 days.
The content regulator added a second layer. Games containing a compulsion loop, meaning any mechanism engineered to funnel players toward loot boxes, would not be approved. If an item could only be obtained from a box, the game was unlikely to clear review at all.
Apple followed in December 2017. Section 3.1.1 of the App Store Review Guidelines was updated to require that apps offering randomised virtual items disclose the odds of each item type before purchase. The wording mirrored China's rule closely, and given the size of that market for Apple, standardisation was plausibly as much the motive as principle.
Consoles took another two years. Sony, Microsoft and Nintendo announced in August 2019 that they would require drop rate disclosure, with implementation expected in 2020. Several large publishers, Bethesda and EA among them, were already doing it voluntarily.
Blizzard is the clearest illustration of how this propagated. To stay available in China, Overwatch published its loot box rarity percentages on its Chinese pages. Once a number exists publicly in one market, keeping it hidden everywhere else becomes untenable.
The Part That Never Arrived
Here is the gap, and it is the whole argument.
Nobody independently verifies loot box odds. There is no equivalent of the test house. No regulator commissions statistical analysis of whether a published 0.6% legendary rate produces 0.6% legendaries across millions of pulls. The number is disclosed on the publisher's word, and that is where it ends.
Compare that to the certification process above and the asymmetry is stark. A slot machine's maths is checked by a third party before it ships and re-checked on a cycle. A gacha rate is a figure in a menu.
Community efforts exist. Players have crowdsourced pull data on plenty of titles and occasionally found discrepancies worth arguing about, but crowdsourced samples are self-selected, unevenly recorded and nowhere near a controlled audit.
Which means the games industry adopted the transparency half of the casino model and skipped the accountability half entirely. Not deliberately, probably. Nobody wrote the rule that way, because the rule was written to require disclosure and stopped there.
Four Countries, Four Different Instincts
Worth noting how differently regulators approached identical mechanics.
The Netherlands bypassed disclosure completely and had its gambling authority declare certain loot boxes to be gambling outright. Belgium went further still and prohibited the mechanic. The United Kingdom opened a parliamentary inquiry rather than legislating, choosing scrutiny over a hard rule. US federal bills have been introduced repeatedly and have consistently failed, which is precisely why app store policy ended up doing the regulatory work in that market.
Four jurisdictions, one mechanic, four incompatible conclusions. That is a reasonable summary of where loot box regulation actually stands.
What the Markets Thought
Two data points, and they are more revealing than any position paper.
When Star Wars Battlefront II tied character progression to randomised rewards in November 2017, the reaction was severe enough that EA pulled the system hours before launch. Investors marked the stock down 8.5%.
When China proposed a further tightening in late 2023, including a requirement that anything obtainable from a loot box also be directly purchasable at a comparable price, Tencent fell 16% and NetEase 25% on the day.
Those numbers quantify how much of the sector's valuation rests on mechanics that regulators keep circling. Disclosure alone did not dent revenue much. Structural requirements very much did.
Where It Leaves Things
The published-odds era is settled and nobody is going back. The ESRB added in-game purchase labelling, the platforms enforce disclosure, and the major publishers comply without complaint.
What has not happened, nearly a decade on, is anyone checking. An industry that borrowed its transparency model from regulated gaming took the visible part and left the machinery that makes it mean something.
Whether that matters depends entirely on how much you trust a publisher's own arithmetic, which is a question the casino sector decided long ago it would rather not ask players to answer. More on the mechanics behind specific titles in the guides archive.
Disclosure: This is a paid guest post. The author or an affiliated third party paid for its publication, and the article may contain promotional links. The views and opinions expressed are those of the author and do not necessarily reflect those of GameTyrant or its editorial staff.
