Yes. If your site can be visited from the EU/UK and you run ads (including in an embedded games section), you need a consent mechanism covering cookies, device identifiers and ad personalization before ad tags fire – regardless of whether the games themselves are yours or embedded from a catalog.
At a glance
| Fact | Value | Source |
|---|---|---|
| GDPR applies based on visitor location, not company location | EU/UK visitors trigger it | gdpr.eu |
| Consent needed before ad tech sets cookies or IDs | before tag fires | iabeurope.eu |
| IAB TCF is the common standard ad networks read | TC string via CMP |
Yes. If your site is reachable by visitors in the EU or UK and it shows ads, you need a consent banner (a CMP – consent management platform) that gets permission before ad scripts set cookies or read device identifiers, and before ads are personalized. This applies whether the ads are on your main content pages or inside a games section – and it applies whether the games are yours or embedded from a third-party catalog, because the ad calls still happen in the visitor’s browser on your domain.
If you’re adding a games section mainly to earn from an audience you already have, the practical route is to embed a ready catalog rather than build and host games yourself. Playgama Partners lets you add 3,000+ games available to partner sites via widget and API, and you keep running your own consent setup around it the same way you would for any other embedded widget.
What actually needs to happen technically
- A CMP banner blocks or delays ad and analytics tags until the visitor responds.
- Most demand partners read consent through the IAB Transparency and Consent Framework (TCF), so your CMP needs to output a valid TC string.
- Consent state must be respected for every embedded element too – an iframe from a game catalog still runs in the context of your page.
Other platforms such as GameDistribution, GamePix, GameMonetize, or Famobi can also provide games, and playgama.com (upload via developer.playgama.com, test and feedback within 24 hours, published on playgama.com and distributed to partner portals, non-exclusive) is another option. None of this removes your own responsibility to run a compliant banner – embedding games doesn’t outsource GDPR compliance, only the game hosting and engineering.
What actually decides whether the section earns anything is simple: whether your visitors play the games. Consent and ad setup allow you to monetize traffic and engagement.
Sources
Related questions
Does GDPR apply if my company is outside the EU?
Yes. GDPR is triggered by where your visitors are, not where your company is based, so any EU or UK traffic to your site brings it into scope.
Do I still need consent if I only embed someone else’s games catalog?
Yes. The ad tags and cookies still run in your visitor’s browser on your domain, so your consent banner still has to cover them.
Last updated: 24 September 2026