Lagos Life and the Law: Legal Issues Every Game Developer in Nigeria Must Know

Cardinal Counsel

October 8, 2026

Gaming Law

Lagos Life: when a game becomes a platform

Lagos Life went live on 1 October 2026, Nigeria’s Independence Day, and drew more than 2 million players in under a week. It is a browser-based life simulation: players get a job, earn virtual naira, pay rent, buy property, survive NEPA, and party at recognisable Lagos spots.

The success is a genuine milestone for Nigerian gaming. It also changes the legal character of the product overnight. A hobby project with a few thousand players is a game. A multiplayer world with millions of users, live chat, an in-game economy and paying advertisers is a platform, and Nigerian law treats platforms very differently.

The early signs are already visible. The game has earned revenue from day one by renting virtual billboards to real advertisers. An exploit flooded the economy with hacked naira, and the affected earnings had to be reset. Commentators on X have flagged openly promoted crypto partnerships, adverts for sexual services and complaints of sexual harassment between players.

None of this is unusual for a platform that scales this fast. But each issue maps onto a specific Nigerian legal regime. This guide to gaming law in Nigeria sets out those regimes for Lagos Life and for every Nigerian game developer building the next one.

1. Data protection for games in Nigeria: NDPA and GAID 2025

A game with millions of Nigerian users is very likely a data controller of major importance under section 65 of the Nigeria Data Protection Act 2023 (NDPA). The NDPC’s General Application and Implementation Directive (GAID) 2025, in force since 19 September 2025, sets out the detail.

That status brings concrete obligations:

Registration with the NDPC, with annual renewal and fees by tier.
A Data Protection Officer.
An initial compliance audit, then annual Compliance Audit Returns.
Breach notification to the NDPC within 72 hours. A hack that exposes accounts or chat logs is a notifiable event.
A lawful basis for every processing activity, documented before processing begins.

The NDPA reaches beyond Nigeria’s borders. It applies to processing of the personal data of people in Nigeria, even where the developer or servers sit abroad. Lagos Life’s developer is reportedly UK-based, which may also bring UK data protection law into play.

Two features of life simulators sharpen the risk. Real-city mapping can generate location and behavioural data. In-game chat captures private conversations. Both call for a Data Protection Impact Assessment and a privacy notice written for players, not lawyers.

2. Online safety: harassment and platform duties

A multiplayer world with chat is a social platform, and harassment complaints are a legal issue, not just a community-management one. Platform operators should plan around three regimes.

The NITDA Code of Practice for Interactive Computer Service Platforms/Internet Intermediaries (2022). It requires platforms to act on unlawful content, keep a complaints mechanism, and cooperate with authorities. Platforms with more than one million Nigerian users carry heavier duties, including local presence and compliance reporting. A game that crossed a million players in three days has reached that threshold in practice.

The Cybercrimes (Prohibition, Prevention, etc.) Act, as amended in 2024. It criminalises cyberstalking, threatening and grossly offensive messages, and the distribution of child sexual abuse material. A platform that ignores reports risks being drawn in as the channel.

Duty of care to young players. A Sims-style game with nightclubs and money will attract under-18s. Under the NDPA, processing a child’s data generally needs parental consent. The Child Rights Act and state equivalents add a wider duty of care. Age-gating, restricted chat for minors, and a fast report-and-block tool are the minimum.

The practical answer is a written Community Standards policy, enforceable through the Terms of Service, with clear sanctions: warnings, mutes, suspensions and permanent bans.

3. Age ratings and age verification for games in Nigeria

Nigeria has no dedicated age-rating system for video games yet. Developers still face three age-related rules: content classification, children’s data and gambling.

NFVCB classification. The National Film and Video Censors Board classifies films and video works under the NFVCB Act. Video games are generally treated as exempted works that do not need prior NFVCB approval. That exemption is lost if a game significantly depicts explicit sexual activity, mutilation or torture, or gross violence towards humans or animals. The NFVCB has also been extending classification to skits and other online video, so in-game video content and trailers deserve a check.

The NFVCB’s categories are a sensible benchmark even where approval is not required:

NFVCB rating	Who it suits
G	All ages
PG	All ages, with parental guidance
12 / 12A	12 and over (12A: younger viewers with an adult)
15	15 and over
18	Adults only

Children’s data. Under section 31 of the NDPA, anyone under 18 is a child, and processing a child’s data needs a parent’s or guardian’s consent. The controller must also use appropriate mechanisms to verify age and consent, and the GAID 2025 makes that consent mandatory. The NDPC may issue further rules for children aged 13 and over who use online services.

Gambling. Under-18s may not take part in gambling in Nigeria. Loot boxes, spin-the-wheel rewards or betting mechanics bought with real money may fall under state gaming regulators, and the FCCPC may act on deceptive in-game purchases.

In practice, a game like Lagos Life should:

Publish a self-declared age rating, with content descriptors such as “nightlife”, “alcohol references” and “user chat”.
Ask for date of birth at sign-up and route under-18s to a parental-consent flow.
Turn off open chat, adult venues and real-money purchases for unverified minors.
Obtain an IARC rating before any move to the Apple or Google app stores.

4. In-game advertising and ARCON vetting

Virtual billboards rented to real brands are advertising directed at Nigerians, and that brings them under the Advertising Regulatory Council of Nigeria Act 2022.

The Federal High Court has confirmed that ARCON’s powers cover all platforms, including social media and digital channels. ARCON has fined online businesses for unvetted adverts and imposed a ₦60 billion penalty on Facebook’s Nigerian operating company over unvetted ads, a sanction the company has challenged in court.

For a game, the lesson is straightforward:

Require advertisers to show ARCON vetting approval before an in-game placement goes live.
Put that obligation, and an indemnity, in a written advertising agreement.
Ban categories outright: sexual services, unlicensed betting, unregistered investment schemes and “get rich quick” offers.
Treat player-run adverts the same way. An advert for sexual services placed by a player is still published on your platform.

5. Virtual currency, crypto and in-game scams

The in-game currency is legally safe while it stays a closed loop: earned in the game, spent in the game, never bought or cashed out. The risk begins the moment real money touches it.

Selling currency or items for naira brings consumer protection rules into play under the Federal Competition and Consumer Protection Act 2018. Clear pricing, refund terms and no misleading offers are required. Payment flows must also run through licensed payment providers.
Cash-out or player-to-player trading for real value starts to look like a payment or stored-value service, which is CBN territory.
Crypto partnerships are the sharpest risk. The Investments and Securities Act 2025 now treats virtual and digital assets as securities and places their issuance, trading and promotion under SEC oversight. A token or “investment opportunity” pushed to players inside the game may be an unregistered securities promotion.

Scams will also run player to player: fake loans, Ponzi-style “ajo” groups, and phishing for real bank details. The Terms of Service must state that the currency has no real-world value. They must reserve the right to reverse exploited balances, as Lagos Life already had to do. And they must prohibit real-money trading the platform has not authorised.

Every commercial partner, crypto or otherwise, should pass basic due diligence before launch: company search, licence check, and a written agreement with conduct warranties and termination rights.

6. Intellectual property for game developers

IP cuts both ways for a game built on real places.

Using other people’s brands. Naming real venues, restaurants or products can attract claims of trademark infringement or passing off. The risk is higher where the portrayal is unflattering or implies endorsement. A neutral, affectionate reference to a public landmark is usually low risk. A branded nightclub depicted in a way its owners dislike is not. The commercial solution is a brand partnership: the venue licenses its name and gets paid placement. That turns a legal risk into a revenue line.

Protecting your own. A viral hit attracts clones within days. A Port Harcourt life simulation followed Lagos Life almost immediately. Founders should:

File trademark applications for the game’s name and logo at the Trademarks Registry, in the classes covering games, software and entertainment.
Keep records that prove authorship of the code, art, music and writing. Copyright arises automatically under the Copyright Act 2022, but evidence wins disputes.
Secure written IP assignments from every developer, artist and contractor, including friends who “just helped”.

User-generated content needs a licence too. The Terms of Service should grant the platform a licence to host and display what players create.

7. Founders’ agreements and company structure

Viral attention brings investors, publishers and acquisition offers quickly. The founders’ own arrangements need to be in writing before those conversations start.

Incorporate properly. A company limited by shares, with clear share allocation, protects the founders personally and is what investors expect. If the developer is abroad, decide early where the main company and IP will sit.
Sign a founders’ agreement. It should cover equity and vesting, roles, IP ownership and what happens if someone leaves. Four equal co-founders can deadlock on every major decision. A casting vote, a chair, or reserved matters with defined thresholds solve this.
Publish proper Terms of Service and a Privacy Policy. These are the platform’s constitution. Every rule in this article is only enforceable if the terms say so and players have accepted them.
Plan for tax. Ad revenue and in-game sales are taxable income, and VAT applies to digital services supplied to Nigerian users.

Legal compliance checklist for game developers in Nigeria

Incorporate a company and sign a founders’ agreement with deadlock rules
Take written IP assignments from every contributor
File trademark applications for the game’s name and logo
Publish Terms of Service, a Privacy Policy and Community Standards
Assess NDPC registration as a data controller of major importance; appoint a DPO
Publish an age rating, verify age at sign-up and get parental consent for under-18s
Build report, block and takedown tools, with response times
Require ARCON vetting for every in-game advert, backed by a written ad agreement
Ban sexual services, unlicensed betting and unregistered investment promotions
Run due diligence on every brand and crypto partner
Use licensed payment providers before selling anything for real money

Frequently asked questions

Do video games need NFVCB approval in Nigeria? Generally no. Video games are treated as exempted works, unless they significantly depict explicit sex, torture or gross violence.

Is there a minimum age to play online games in Nigeria? There is no general minimum age. But anyone under 18 is a child under the NDPA, so their data needs verified parental consent, and under-18s may not gamble.

Do in-game adverts need ARCON approval? Yes, adverts directed at Nigerian audiences need ARCON vetting, and the courts have confirmed ARCON’s powers extend to digital platforms.

Can a game partner with a crypto company in Nigeria? Only with care. Digital assets are securities under the Investments and Securities Act 2025, so promoting them to players can attract SEC scrutiny.

How do I protect my game’s name from copycats? File a trademark application for the name and logo, and take written IP assignments from everyone who worked on the game.

Conclusion

Lagos Life has shown that Nigerian stories can become mass-market digital products in a matter of days. The legal framework behind them has to keep pace, because regulators, advertisers and bad actors all go where the users are.

The gaming businesses that last will be those that build compliance into the product from the start rather than adding it as an afterthought. Nigeria’s gaming industry has found its audience; what it needs now is the structure to sustain it.

About Cardinal Counsel

Cardinal Counsel (Barristers & Solicitors) is a Lagos-based law firm advising creative, fashion and technology businesses on intellectual property, data protection, regulatory compliance and commercial transactions. The firm works with founders and platforms from formation to scale, helping them protect their brands, meet their regulatory obligations and build on sound legal foundations.

This article is for general information only and does not constitute legal advice. For advice on your platform, contact Cardinal Counsel at Suite D14, Adeniran Ogunsanya Mall, Surulere, Lagos, or email info@cardinalcounsel.co.

Sources

Tag Post :

Creative Economy, crypto ISA 2025, NDPA children's data, NFVCB video games, startups

Leave a Reply Cancel reply

Need help customizing a document or navigating a legal issue?

We can help!