Privacy Policy

1. Who We Are

BOBS.gg is a Robux cashback rewards platform operated from Indaiatuba, São Paulo, Brazil. We are an independent service and are not affiliated with Roblox Corporation. When this policy uses "we," "us," or "our," it refers to the BOBS.gg team.

For privacy inquiries, contact us through the support channel on bobsss.xyz.

2. Data We Collect

We only collect data that is strictly necessary to operate the cashback service. We follow a data minimization principle — we do not collect what we don't need.

We do not collect: passwords, payment card details, real names, email addresses (unless you voluntarily contact support), or any data beyond what is listed above.

3. How We Use Your Data

We use collected data solely for the following purposes:

• Reward verification: Confirming a qualifying purchase occurred and computing the correct cashback amount
• Reward delivery: Issuing Robux payouts via official Roblox Group Payout or Open Cloud APIs
• Fraud prevention: Detecting duplicate claims, chargebacks, or abuse of the cashback system
• Platform security: Identifying unauthorized access attempts
• Legal compliance: Retaining records as required by applicable law

We do not use your data for advertising, behavioral profiling, analytics products, or any purpose unrelated to operating the cashback service. We never sell or rent your data to third parties.

4. Roblox API Data — Special Rules

Because we access data through Roblox APIs, we are bound by Roblox's Creator Third-Party App Policy in addition to this Privacy Policy. Specifically:

• We only request the minimum API scopes necessary to verify purchases and issue payouts
• We do not use Roblox API data to profile users across platforms or services
• We do not aggregate or sell data obtained through Roblox APIs
• We do not use Roblox user data to train AI or machine learning models
• Transaction data is retained only for as long as needed to process the corresponding reward, after which it is deleted or anonymized
• If our access to Roblox APIs is revoked for any reason, we will expunge all data obtained through those APIs as required by Roblox policy

5. Data Retention

We retain data for the shortest period necessary:

• Transaction records: Deleted or anonymized within 90 days of the reward being issued
• Reward audit logs: Retained for up to 12 months for fraud investigation and legal compliance purposes
• Session / technical data: Purged automatically after 30 days
• Support communications: Retained for 12 months after resolution, then deleted

6. Data Sharing

We do not sell, trade, or rent your personal information. We may share data in the following limited circumstances:

• Roblox Corporation: Transaction and payout data is necessarily shared with Roblox as part of the API payout process
• Partnered game creators: Aggregated, non-personally-identifiable purchase statistics may be shared with game partners to confirm reward eligibility
• Infrastructure providers: Hosting and database services that process data on our behalf under confidentiality obligations
• Legal requirements: If required by law, court order, or governmental authority

7. No Profiling of Roblox Users

Consistent with Roblox's Creator Third-Party App Policy, we do not build behavioral profiles of Roblox users. Data collected for one reward event is used exclusively to process that event and is not combined with data from other sessions or platforms to infer behavioral patterns, preferences, or traits about any user.

8. Cookies and Tracking

We use session cookies strictly for authentication and fraud prevention. We do not use advertising cookies, cross-site tracking pixels, or third-party analytics scripts that collect personal data.

9. Children's Privacy

Roblox's user base includes minors. We take this seriously. We do not knowingly collect any data beyond Roblox User ID and transaction records from any user, regardless of age. We do not display advertising, collect email addresses, or engage in any marketing toward users. If you are a parent or guardian and believe your child's data has been collected inappropriately, contact us and we will delete it promptly.

10. Your Rights (LGPD — Brazil)

Under the Lei Geral de Proteção de Dados (Law 13,709/2018), you have the right to:

• Confirm whether we hold data about you
• Access a copy of your data
• Correct inaccurate or incomplete data
• Request deletion of data that is no longer necessary
• Object to processing where consent is the legal basis
• Receive your data in a portable format

To exercise any of these rights, contact us through the support channel on bobsss.xyz. We will respond within 15 business days.

11. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), access controls, and regular security reviews. No system is perfectly secure — if you suspect unauthorized access to your data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of BOBS.gg after changes are posted constitutes acceptance of the revised Policy.

13. Contact

For any privacy-related questions, data requests, or concerns, reach us through the support channel at bobsss.xyz.