rblx Platform Privacy Notice

We at rblx collect and process personal data to deliver our gaming platform securely, verify your identity, process payments via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet, and manage your account. This notice explains what we collect, how we use it, and what rights you have.

Our approach to privacy centres on transparency and protection. We collect only what we need to operate our platform, serve you reliably, and comply with local regulations. We never sell your personal data to third parties. All data we hold is encrypted and stored on secure servers. If you have questions about your data or wish to exercise your privacy rights, our support team is available during business hours.

This policy applies to all users of rblx, whether you're accessing from Jakarta, Surabaya, Bandung, Medan, Semarang, or anywhere our services are available. Please read this notice carefully. If you do not agree with our practices, you may choose not to use our platform.

What Data We Collect

We collect personal data in several categories when you use rblx. First, we collect account creation data: your email address, a password you set, and basic profile details (name, date of birth, phone number). This allows us to create and manage your account securely.

Second, we collect identification and verification documents when you request a withdrawal. We ask for a valid photo ID, proof of address, and a selfie holding your ID. This is a regulatory requirement that protects both you and our platform from fraud and money-laundering risks.

Fourth, we collect gameplay data: which games you play (slots like Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways, or live-dealer tables), your session duration, and your account balance. This data helps us improve our platform, detect fraud, and respond to support requests.

How We Use Your Data

We use your data for five primary purposes. First, account management: we use your email and password to let you log in, manage your profile, and reset your password if needed. Second, verification and compliance: we use your ID and proof of address to confirm your identity before allowing withdrawals, and to comply with Know Your Customer (KYC) regulations.

Third, payment processing: we use your payment method details to process deposits and withdrawals. We pass your transaction data to our payment processors (the companies that operate mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and the banks). These processors handle the actual fund transfer. Fourth, fraud detection: we analyse your account activity to detect suspicious patterns—for example, multiple failed login attempts or unusual withdrawal requests. This protects your account from unauthorized access.

Fifth, customer support: if you contact our support team with a question about your account, payment, or gameplay, we use your data to investigate and respond. We may also use anonymized gameplay data to understand which games are popular and identify technical issues.

Third-Party Processors

We do not sell your data, but we do share it with trusted processors who help us operate rblx. Payment processors (operated by online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and our banking partners) receive transaction details to process your deposits and withdrawals. These companies have their own privacy policies. We encourage you to review them.

We also use a cloud hosting provider to store our servers and databases. This provider may be located outside Indonesia. Your data is encrypted both in transit and at rest, so the hosting provider cannot read your personal information. We have a data-processing agreement with our hosting provider that requires them to maintain strict security and confidentiality.

Your Rights on rblx

You have several rights over your data on rblx. You can request access to all personal data we hold about you. You can ask us to correct inaccurate data. You can request deletion of your data (though we may retain some information as required by law or for fraud prevention). You can object to how we use your data. You can request a copy of your data in portable format.

To exercise any of these rights, contact our support team via your rblx account dashboard. We will respond to your request within 30 calendar days. If your request is complex, we may need additional time, and we will notify you. We will never charge you for processing a rights request unless your request is manifestly unfounded.

Cookies and Tracking

We use cookies on rblx to enhance your experience. Cookies are small files stored on your device that help us recognize you when you return, remember your preferences, and keep you logged in. Most cookies are session-based and expire when you close your browser. Some are persistent and remain on your device for longer periods to remember your login state across visits.

We do not use cookies to track you outside the rblx platform. We do not share cookie data with third-party advertisers. You can disable cookies in your browser settings, though doing so may limit platform functionality (for example, you may need to log in each time you visit).

Data Retention and Security

We retain your personal data only as long as necessary. Account data is retained while your account is active. After you close your account, we delete most personal data within 90 days, except for transaction records (retained for seven years per regulations) and data needed for fraud prevention.

We protect your data using industry-standard encryption (TLS/SSL for data in transit, AES-256 for data at rest). We limit access to your data to authorized rblx employees and processors who need it to serve you. All our staff sign confidentiality agreements. We conduct regular security audits and penetration testing to identify and fix vulnerabilities.

Children and Age Verification

Our services are not intended for minors. We do not knowingly collect data from anyone under the minimum age required by law in their jurisdiction. If we discover that we have collected data from a minor, we will delete it promptly. Parents or guardians who believe a minor has created an rblx account should contact our support team immediately.

Policy Changes and Contact

We may update this privacy policy occasionally to reflect changes in our practices or regulations. We will notify you of material changes via email or a notice on rblx. Your continued use of rblx after changes are posted constitutes acceptance of the updated policy.

If you have questions about this privacy notice, wish to exercise your rights, or have concerns about how we handle your data, contact our support team. We respond to all privacy inquiries within one business day during standard business hours. Our services are available only where local law permits. We do not offer our services in jurisdictions where online wagering is prohibited. Users are responsible for verifying that access and use comply with their own jurisdiction's law.

Last updated: this policy reflects our current data practices on rblx. We are committed to protecting your privacy while delivering a secure, reliable gaming platform.