Cross-Border Online Gaming Tax in India 2026: The OIDAR Regime, Section 2(17), and Permanent Establishment Risk
Through 2024 and 2025 the Directorate General of GST Intelligence sent show-cause notices to a sequence of foreign-headquartered online gaming operators serving Indian players, and the pattern that emerged is now unambiguous: once a non-resident operator accepts a deposit from a user in India, the Indian GST department treats that transaction as taxable in India at 28% on the full face value — the same rate domestic operators pay — and expects the operator to be registered under the OIDAR regime, to have appointed a Section 14 CGST representative, and to be filing GSTR-5A every month. This cluster is the third in our India Online Gaming Taxation 2026 series. It walks through the cross-border tax architecture, the Finance Act 2023 amendment that pulled online gaming unambiguously into OIDAR, the registration mechanics through Form GST REG-10, the Permanent Establishment risk on the income-tax side, DGGI enforcement to date, and what a compliant 2026 cross-border operator stack actually looks like.
1. The two questions every foreign operator asks about India
When a non-resident online gaming company evaluates India as a market, the tax-and-compliance diligence collapses into two questions. First: on the indirect-tax side, is the operator exposed to Indian GST on its revenue from Indian players, and if so, through what mechanism and at what rate? Second: on the direct-tax side, does the operator have a Permanent Establishment in India, and if so, which share of its global income becomes taxable in India under the Income-tax Act and the applicable Double Taxation Avoidance Agreement? Through 2023 the answers to both questions were ambiguous enough that several operators ran the "no India presence, no India tax" argument on reasonable advice. Through 2024-25 that interpretation collapsed. The Finance Act 2023 amendment to Section 2(17) of the CGST Act, combined with the operational buildout of DGGI's cross-border enforcement capability, settled the GST side. The direct-tax side is still case-by-case, but the OECD-era Permanent Establishment definition has been applied aggressively enough in cross-border digital commerce audits that the earlier "pure digital, no PE" reading is no longer safe.
The practical answer in 2026 is that any operator genuinely serving Indian players at scale must be registered under OIDAR, must have a Section 14 representative in India, must have resolved whether its activity creates a PE under the applicable DTAA, and must be filing both GSTR-5A monthly and, where a PE is established, an India corporate return. The compliance stack is non-trivial, and operators who have treated it as optional through 2024-25 are now the ones being audited.
2. OIDAR: what it is and when it applies to online gaming
Online Information and Database Access or Retrieval services (OIDAR) is the Indian GST regime for cross-border digital services supplied by a non-resident to a recipient in India. The regime was originally designed for software downloads, cloud services, streaming, and online advertising — the kind of digital service a Netflix or an AWS supplies to Indian customers from offshore. The architectural logic of OIDAR is that India cannot practically tax the import of a digital service through customs the way it taxes a physical import, so instead it requires the non-resident supplier to register in India, collect the GST, and remit it directly to the Indian exchequer, bypassing the normal reverse-charge mechanism that would otherwise apply to B2C imports.
Prior to the Finance Act 2023, the OIDAR definition in CGST Section 2(17) was wide enough in its enumeration that online gaming could in principle be argued either in or out. Some operators took the view that an online gaming service, where human intervention from the player is central to the activity, failed the OIDAR definitional test that the service be "essentially automated and involving minimal human intervention." Others took the view that an online gaming platform's back-end — the RNG, the matchmaking engine, the wallet, the compliance pipeline — was indeed essentially automated and that the player's input was simply the input signal to the automated service, so OIDAR applied. The ambiguity suited everyone except the exchequer, and it ended in 2023.
3. The Finance Act 2023 amendment to CGST Section 2(17)
The Finance Act 2023 rewrote CGST Section 2(17) to remove the "essentially automated" qualifier and to expand the enumeration to include online gaming expressly. The amended definition brings into OIDAR any digital service supplied over the internet or an electronic network, with online gaming (defined with a cross-reference to Section 2(80B) added by the same Act) called out as a covered category. The amendment is in force from 1 October 2023 — the same date on which the 28% rate under Rule 31B became effective and the Section 194BA TDS regime became mandatory. In other words, the entire re-architecture of online-gaming taxation — rate, mechanism, cross-border coverage — switched on at a single date.
The practical consequence for a non-resident operator is that OIDAR registration is no longer optional. Any supply of online money gaming to a recipient in India (identified by the user's IP, billing address, or payment-instrument location — the standard OIDAR recipient-location rules under CGST Section 13(12)) is a taxable supply in India by the non-resident. The non-resident must register for GST, must appoint a Section 14 representative (a person established in India who is jointly and severally liable for the tax), and must file GSTR-5A monthly reporting the aggregate taxable value and tax paid. For the player-facing side of the compliance picture, the Section 194BA TDS cluster covers the parallel income-tax withholding at withdrawal.
4. Form GST REG-10 and the registration mechanics
Registration for a non-resident OIDAR supplier is through Form GST REG-10 on the GST portal. The form is deliberately lighter than the resident-taxable-person Form REG-01 — the department recognises that a non-resident supplier has neither a PAN of the Indian variety nor a local principal place of business — but it still requires passport details or company incorporation evidence of the authorised signatory, bank account details for the Indian representative, and a declaration of the services supplied. The GSTIN issued under REG-10 carries a state code of 97 (reserved for OIDAR non-resident suppliers) and is distinguishable in the GSTIN format from a resident registration.
Once registered, the operator files GSTR-5A monthly by the 20th of the following month, reporting the aggregate value of taxable supplies to recipients in India and the GST paid. There is no input tax credit available to an OIDAR non-resident on inputs sourced from India; the GST paid is a pure cost. Payment is in Indian Rupees through the Indian representative's bank account, which means the non-resident needs an operational banking relationship in India — through its appointed representative in practice — to settle the monthly tax.
5. The 28% rate: no shelter for foreign operators
One question that came up repeatedly in 2024 was whether the 28% rate under Rule 31B — designed for the domestic online-gaming industry — applied symmetrically to OIDAR suppliers of online gaming. The CBIC clarification issued through 2024 removed the ambiguity: the rate is 28% on the full value of the deposit (not GGR, not platform fee) regardless of whether the supplier is resident or non-resident. The GST impact review cluster covers the domestic consequences of this rate; the cross-border consequence is simply that a foreign operator pays the same 28% on every Indian-sourced deposit that an Indian operator pays, with the operational difference being that the foreign operator remits through GSTR-5A rather than GSTR-3B.
This has a direct bearing on operator economics. The headroom a foreign operator might have hoped to carry from a lower cost base in its home jurisdiction is partially wiped out by the 28% at the point of supply into India. Combined with the Section 194BA TDS deduction at withdrawal — which applies to any payment of winnings to a resident Indian player regardless of operator jurisdiction — the net economics of serving Indian players as a foreign operator are now in a narrow band around what a domestic operator earns, with the compliance overhead rather higher.
6. Permanent Establishment risk on the income-tax side
Where the GST side of the cross-border architecture is now settled, the direct-tax side still requires careful analysis per operator. The question is whether the non-resident operator has a Permanent Establishment in India under the applicable DTAA — most commonly the India-Mauritius, India-Singapore, or India-Malta treaties for the gaming industry — and if so, which portion of its global income is attributable to that PE and taxable in India under Section 9 and Section 5(2) of the Income-tax Act.
A pure digital operator with no Indian subsidiary, no server in India, and no fixed place of business in India has historically relied on the "no fixed place of business, no PE" reading of Article 5 of the standard DTAA template. Through 2024-25 the Indian tax authorities, encouraged by OECD BEPS Action 7 and the Significant Economic Presence provisions added to Section 9 by the Finance Act 2018 and operationalised through subsequent notifications, have taken a more aggressive view: a non-resident with significant and sustained economic engagement with Indian users may be deemed to have a nexus in India sufficient to create a PE equivalent under the domestic Section 9 definition, even in the absence of a traditional fixed-place-of-business PE.
The result in practice is that operators serving Indian players at scale have moved — on advice — toward either (i) establishing a wholly-owned Indian subsidiary that holds the India operation, in which case the PE question is settled affirmatively and the economics are those of a domestic operator, or (ii) structuring the India operation as a licensed white-label of a domestic operator, in which case the foreign operator earns a licence fee rather than Indian-sourced gaming revenue and the PE exposure is dramatically lower. The pure "offshore operator serving India from abroad with no local structure" posture is no longer safe for any operator of material size.
7. DGGI enforcement through 2024-2026
The Directorate General of GST Intelligence has become the single most visible enforcement actor in the cross-border online-gaming space. DGGI's playbook, developed through investigations into Gameskraft (which was domestic but established the ₹28,000 crore show-cause-notice template that was then repurposed for cross-border audits), Delta Corp, and a sequence of foreign-headquartered operators, follows a consistent sequence: (i) data gathering through payment-aggregator records and banking channels to identify Indian-sourced deposit volume by operator; (ii) comparison with the operator's filed GSTR-5A to identify under-reporting; (iii) a Section 74 show-cause notice issued for the under-reported period, typically covering FY24-FY25 inclusive; (iv) blocking of the operator's URLs through MeitY under Section 69A of the IT Act as a parallel enforcement lever.
Several high-profile actions through 2024-25 established the pattern. Operators that had taken the "no OIDAR" view pre-2023 and had not retrospectively registered after the Finance Act 2023 amendment received show-cause notices for the full 28% on their cumulative Indian-sourced deposit volume from 1 October 2023 forward, with interest under Section 50 and penalty under Section 74 added. The URL-blocking lever, applied in parallel, created a commercial pressure that most operators resolved by negotiating a settlement — paying the back-GST, registering under OIDAR going forward, and in several cases restructuring the India operation into one of the two safe-harbour postures above.
8. What a compliant cross-border stack looks like in 2026
By 2026 the compliant architecture for a foreign operator serving India has crystallised. The operator maintains an active OIDAR registration under GSTIN 97, files GSTR-5A by the 20th of every month, and has an appointed Section 14 representative with real operational capacity in India (not a shell address). On the direct-tax side, the operator has either an Indian subsidiary that holds the operation or a licence agreement with a domestic operator; either way the PE question is answered rather than left ambiguous. On the player-facing side, the operator deducts Section 194BA TDS at every withdrawal and files quarterly Form 26Q; see the TDS cluster for the per-withdrawal mechanics.
The engineering stack that supports this compliance is non-trivial: a geo-fencing layer that identifies Indian players at onboarding, a Rupee wallet that holds Indian-player balances in a segregated ledger, a GST computation that applies 28% on every deposit at the moment of payment, a 194BA computation that deducts TDS on every withdrawal, a monthly reconciliation that produces GSTR-5A, and a reporting pipeline that files Form 26Q quarterly. Operators who built this from day one of 2024 are the ones who have scaled through the DGGI enforcement wave without disruption. Operators who treated 2024-25 as a grey-zone opportunity to earn Indian revenue without the compliance overhead are the ones who have paid back-GST at 28% on cumulative deposit volume plus interest and penalty.
For a player-facing perspective on how this compliance architecture translates into the user experience — including the format breadth and withdrawal mechanics of compliant operators — see the India real-money gaming platform landscape on earn7.net and the format-specific coverage of Yono Rummy and Aviator, both of which operate within the domestic compliance perimeter described above.
Series navigation
This is Cluster #3 of our India Online Gaming Taxation 2026 Pillar series. The companion clusters are India 28% GST on Online Gaming — A 2.5-Year Impact Review (deposit-side GST), 30% TDS on Online Gaming Winnings — Section 194BA Explained (withdrawal-side TDS), and Online Gaming Winnings Tax in India — Section 115BBJ for Players (player-side income tax). The regulatory framework around skill-versus-chance and state-level law is in the sibling Online Gambling Laws in India 2026 cluster, and the broader market context in the India Online Entertainment Industry Report 2026 Pillar.
Further reading on earn7.net: compliant India real-money gaming operators that demonstrate the architecture described above in the player-facing experience.
This article is informational and reflects publicly available statutes, DGGI investigation disclosures, and CBIC circulars as of October 2026. It is not legal or tax advice; non-resident operators evaluating the India market should consult licensed Indian counsel for a specific position.