Evidence
Provide the relevant configuration, catalog, service inventory, screenshots or recordings, test account/build, and a clear description of remotely controlled behavior.
CPS-04
No Loot Boxes
Money or purchased value must never lead to a random reward.
Does not pass
Prohibited patterns
Paid loot boxes, gacha pulls, mystery crates, paid spins, paid keys, random paid card packs, or any indirect purchased-value chain to random content.
Can pass
Permitted patterns
Procedural levels, random gameplay events, earned-only random drops with no purchase/cash-out route, and fixed bundles whose contents are shown before purchase.
How the audit treats this rule
Evidence, behavior, and edge cases.
Test
The reviewer checks actual behavior across applicable account states, regions, purchase paths, notifications, remote flags, and relevant service traffic.
Pass condition
The prohibited behavior is absent, permitted behavior fits the stated caveat, and the evidence is sufficient for the frozen product scope.