By the way, AB 831 isn’t a vague proposal — it slams the door on any casino-style sweepstakes that masquerade as “skill-based” games. Look: if you’re running a site that spins a wheel, hands out a “virtual token” and then lets users cash out real money, you’ve just tripped the legal switch. The law says “no” to that loophole, and it does so with a ferocity that makes old-school gambling regulations look like child’s play.

Who’s in the Crosshairs

Here is the deal: developers, marketers, even the casual “game-host” who thinks “just a fun side hustle” keeps them safe. The statute casts a wide net — any platform that offers a chance to win cash or something of tangible value based on chance, not skill, is on the chopping block. And guess what? The definition of “chance” is as broad as a California sunset, so you can’t hide behind tiny “skill elements” like a single dice roll.

Geography Matters

California residents are the only ones the law cares about, but the internet doesn’t respect state lines. If your user base includes Golden State folks, you’re liable. The state’s attorney general has already flagged dozens of sites, and the crackdown is only accelerating.

Penalties That Pack a Punch

And here is why you should care: fines can soar into six figures per violation, plus injunctive relief that can shut down your entire operation overnight. No warning letters, no gentle nudges — just a legal hammer that can crush your revenue stream faster than a server crash.

Compliance Checklist — No Fluff

First, audit every game mechanic. Does a user ever have a 100% chance of winning? If yes, you’re playing with fire. Second, strip out any “cash-out” pathways for California users. Third, replace those pathways with pure “virtual goods” that have no real-world value. Fourth, implement robust geo-blocking that can actually detect a California IP — no half-hearted solutions.

What to Do Right Now

Stop. Pull the plug on any sweepstakes-style offer that lets a Californian walk away with actual money. Replace it with a free-to-play model that only awards in-app credits. Then, file a compliance report with your legal team and set up a monitoring system that alerts you the moment a California IP shows up.

Final Piece of Actionable Advice

Get your devs to hard-code a “California block” at the API level and test it today, or you’ll be answering a subpoena tomorrow.