If it's default ports, you can just probe on login and deny it. We do this for a game I've admined for, and it's in the terms of service. Common L2TP, PPTP, etc.
> I help develop a fairly popular webgame.
... unless the web-based game relies on a plugin that can skirt the browser's sandbox, there's no way to probe for active ports.