Alaab FZE is the controller of personal data processed for Robloxat accounts, orders and related features. Our registered address and contact details appear below. Send privacy questions and requests to support@robloxat.com.
Service and contact
Robloxat at robloxat.com is operated by Alaab FZE (ألعاب م م ح), a Free Zone Establishment registered in the United Arab Emirates. Formation number: 4432103. Trade licence: 4432103.01, issued by Sharjah Publishing City – Free Zone Authority. Registered address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. We are the seller, including when suppliers assist delivery. In these policies, “we” means Alaab FZE. Contact for support, complaints and personal data: support@robloxat.com; telephone: +971558169247.
Information we process
We process account identifiers, email where provided, profile names/images, preferences, game recipient details, orders, payment status, balance and delivery records, and support messages. Technical records may include IP address, browser/device information, sessions and security events. Do not send passwords, login codes, game cookies or full card details.
Google sign-in may provide an identifier, email, name and profile image. Snapchat provides an app-specific identifier and display name; optional Bitmoji permission supplies an image URL, not email, contacts or messages. We store the URL for your avatar; this integration does not retain Snap access/refresh tokens. Uploaded avatars take priority. Facebook sign-in provides an app-specific identifier, name and available profile image URL through public_profile. We do not request Facebook email, friends, posts, messages or publishing permissions. Facebook tokens are used only for server-side sign-in checks and are not stored. Your uploaded avatar takes priority.
Information is used for requested account and order functions, support, security, fraud prevention, accounting and legal claims or obligations. The lawful basis depends on the purpose and applicable law; any required consent must be obtained separately. Optional avatar access is not required for purchases.
Sharing and public activity
Information may be shared as necessary with hosting, authentication, fulfilment, security and support providers, or as law requires. External sign-in and image services receive connection information. Processing abroad is subject to applicable transfer requirements. Before a payment or identity-check provider receives your data, we identify the recipient, purpose and applicable privacy information.
Successful withdrawal activity can show masked participant/recipient names, an item and its time to other visitors. Masking does not guarantee anonymity. Pausing the display does not stop publication of your events. Contact support about applicable privacy rights. Children's information requires the protections and permissions applicable to it.
Identity and payment checks
We first use existing records and the least intrusive evidence, such as an order reference or redacted payment confirmation. Identity documents may be requested only when necessary and lawful. Before collection, we explain the purpose, required fields, recipient, retention criteria and secure submission method. Do not email identity documents or send passwords, login codes, full card details or game cookies. Never make a verification payment or trade. Data is limited to the check and applicable legal needs; access is restricted and unnecessary copies are deleted.
Your choices and rights
Records are kept for their service purpose and applicable accounting, security or dispute requirements, not indefinitely without a reason. Deletion may exclude records legally required for retention. Security measures reduce risk but cannot guarantee absolute protection. Report suspected compromise to support.
Depending on applicable law, you may request access, correction, deletion, restriction, portability, objection or withdrawal of consent, and complain to a competent authority. Withdrawal does not invalidate earlier lawful processing. We explain limitations and respond within applicable legal deadlines; identity checks must be proportionate.
Contact support and mention the policy and section you are asking about.