Ultimately, most publishers will probably handle it like Valve, who have found a brilliant workaround:
Show players the contents of the next box they buy, which makes it not gambling.
I hate it, but it's a very elegant solution to avoid any legal problems.