What is Malaysia proposing for online gaming?

The government is studying whether to extend eKYC and age verification obligations, already mandatory for social media since June 2026, to online gaming platforms, with Communications Minister Fahmi Fadzil naming Roblox and citing extremist recruitment on gaming platforms as a driver.

No. Fahmi described it as under study, with no bill, timeline, or age threshold announced. The social media precedent and existing MyDigital ID infrastructure mean implementation could move quickly once a decision is made.

What is MyDigital ID?

Malaysia's national verification platform, used for government portals and participating commercial services: 14.2 million registrations, 82.75 million logins since 2024, and over 200 integrated applications as of October 2026. Its age checks query National Registration Department records instead of storing IDs or biometrics.

How would gaming age checks differ from social media checks?

Gaming skews younger, runs on shared devices, and reaches users unlikely to hold formal ID, so registry lookups tied to a parent's credentials, estimation methods, and inclusive fallbacks matter more than in social onboarding flows.

What should gaming operators do now?

Treat age assurance as a configurable compliance layer rather than a one-market feature: map which markets can mandate checks on existing infrastructure, pick providers who support multiple check types per jurisdiction, and watch the Malaysia-Indonesia-Australia coordination channel for the next obligation.

Back to News

The Deep Brief · Oct 23, 2026 · 4 min read

Malaysia studies age verification for Roblox and online gaming

Malaysia may extend eKYC and age checks to online gaming platforms including Roblox, with MyDigital ID's 14.2 million registrations backing the expansion.

Rosalie Chirip

Senior Editor at deepidv

The Petronas Twin Towers lit up at dusk above the Kuala Lumpur skyline, as Malaysia weighs age checks for online games.

Malaysia spent 2026 building one of the most assertive age assurance regimes in Asia, and it is not finished. Communications Minister Fahmi Fadzil said this week the government is studying whether to extend eKYC and age verification to online gaming platforms, naming Roblox specifically, which would carry obligations that currently sit on social media into a category regulators elsewhere have barely touched. The stated rationale is sharper than the usual child-safety framing: Fahmi cited concerns that gaming platforms are being used as recruitment channels by extremist and terrorist groups, which moves the policy conversation from screen time to national security.

The social media baseline makes the extension plausible rather than aspirational. Age verification for social platforms has been mandatory in Malaysia since the law took effect in June 2026, and the enforcement infrastructure already exists in MyDigital ID, the national verification platform whose numbers Fahmi rehearsed: 14.2 million registrations, 82.75 million login transactions since 2024, more than 200,000 transactions per day, and integrations with over 200 government and private-sector applications as of October 7. A government that has already wired age checks into social login flows does not face a cold start when it turns to gaming, it faces a scoping decision.

Roblox signals cooperation, and the hard part is the check

Fahmi said Roblox has "shown that they are ready to cooperate," locating the open question in user and age verification rather than platform willingness. That is the honest framing. Gaming platforms skew younger than social networks, sessions start on shared family devices and school machines, and the population least likely to hold formal ID is precisely the population the rules target, the same inclusion problem age assurance programs everywhere wrestle with. Malaysia's design answer so far is notable: MyDigital ID's age checks verify users against National Registration Department records rather than collecting or storing physical IDs or biometrics such as fingerprints or facial images, a registry-lookup pattern that minimizes data on platforms, though it concentrates trust, and availability risk, in a single government service.

The regional diplomacy layer

The second thread in Fahmi's remarks was coordination: he plans to raise social media age restrictions with Indonesian officials at the World Conference on Creative Economy, noting Indonesia's framework has differences and similarities to Malaysia's. Indonesia has been moving toward deactivating under-16 accounts on its own schedule, and Australia's communications minister is reportedly building an enforcement coalition that includes Malaysia. The pattern deserves operator attention: age assurance rules are starting to propagate through ministerial networks faster than through legislation, which compresses the gap between a policy appearing in one market and appearing in five.

For gaming and adjacent operators, including the real-money platforms that already run full KYC programs, the planning assumption should be that the free-to-play perimeter is dissolving. A Roblox obligation in Malaysia would be the first major move of eKYC into mainstream gaming, and the operators who fare best under new verification mandates are consistently the ones who built the check as a configurable layer, per-jurisdiction and per-risk, rather than as a hard-coded gate. The decision-plane approach treats a Malaysian registry lookup, an estimation fallback, and a document check as interchangeable evidence sources behind one policy, which is what a multi-market gaming platform will need when the second and third ministries call.

Malaysia Gaming Age Verification FAQ

What is Malaysia proposing for online gaming?: The government is studying whether to extend eKYC and age verification obligations, already mandatory for social media since June 2026, to online gaming platforms, with Communications Minister Fahmi Fadzil naming Roblox and citing extremist recruitment on gaming platforms as a driver.
Is this a law yet?: No. Fahmi described it as under study, with no bill, timeline, or age threshold announced. The social media precedent and existing MyDigital ID infrastructure mean implementation could move quickly once a decision is made.
What is MyDigital ID?: Malaysia's national verification platform, used for government portals and participating commercial services: 14.2 million registrations, 82.75 million logins since 2024, and over 200 integrated applications as of October 2026. Its age checks query National Registration Department records instead of storing IDs or biometrics.
How would gaming age checks differ from social media checks?: Gaming skews younger, runs on shared devices, and reaches users unlikely to hold formal ID, so registry lookups tied to a parent's credentials, estimation methods, and inclusive fallbacks matter more than in social onboarding flows.
What should gaming operators do now?: Treat age assurance as a configurable compliance layer rather than a one-market feature: map which markets can mandate checks on existing infrastructure, pick providers who support multiple check types per jurisdiction, and watch the Malaysia-Indonesia-Australia coordination channel for the next obligation.