Depending on your location, you may have rights to see, fix, delete, or move your personal data, or to object to how it is used. You can submit requests through your Roblox account settings or by emailing privacy@roblox.com.
This analysis describes what Roblox's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy discloses a range of data subject rights applicable depending on user jurisdiction, including access, correction, deletion, portability, restriction, objection, and consent withdrawal; the scope of rights available to a given user depends on their jurisdiction, and the identity verification requirement is an operational step that affects how easily users can exercise these rights.
Users can request access to, correction of, deletion of, or portability of their personal data by submitting a request at https://www.roblox.com/my/account or emailing privacy@roblox.com. The rights available depend on where you live, and Roblox states it will verify your identity before processing requests.
How other platforms handle this
In addition to the above rights, your local laws (including those in the EU, UK, Japan, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Virginia, or Utah) may afford you f...
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
Depending on where you live, you may have certain rights with respect to your personal information. These rights may include: The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which we collected i...
Monitoring
Roblox has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Depending on where you live, you may have certain rights regarding your personal information, including the right to access, correct, delete, or port your personal information, the right to restrict or object to processing, and the right to withdraw consent. To exercise these rights, please submit a request through our privacy request form at https://www.roblox.com/my/account or contact us at privacy@roblox.com. We will verify your identity before processing your request.— Excerpt from Roblox's Roblox Privacy Policy
(1) REGULATORY LANDSCAPE: This provision implements data subject rights under GDPR (Articles 15-22), UK GDPR, CCPA/CPRA, and other applicable regional privacy laws. The identity verification requirement must be assessed to ensure it does not impose a disproportionate burden that effectively discourages rights exercise, which has been noted by EU DPAs and the California CPPA as a potential compliance concern. (2) GOVERNANCE EXPOSURE: Medium. The policy provides a single request channel for multiple jurisdictions with different rights frameworks and response timelines. The operational process must be capable of distinguishing between GDPR requests (one-month response, certain exemptions) and CCPA requests (45-day response, different exemptions) and responding appropriately for each jurisdiction. (3) JURISDICTION FLAGS: EU/EEA (GDPR Articles 15-22), UK (UK GDPR), California (CCPA/CPRA), Colorado, Connecticut, Virginia, Texas, and other states with enacted privacy rights. The rights available to users in jurisdictions without specific privacy legislation are not clearly delineated in the policy. (4) CONTRACT AND VENDOR IMPLICATIONS: Service providers and sub-processors must be contractually obligated to support Roblox's ability to fulfill data subject rights requests, including access and deletion requests. Where data is held by third-party processors, the rights fulfillment process must extend to those parties. (5) COMPLIANCE CONSIDERATIONS: Legal teams should document the rights available by jurisdiction and ensure the request intake process correctly routes requests to jurisdiction-specific response workflows. The identity verification process should be evaluated to confirm it does not impose unreasonable barriers. Response time tracking systems should be audited to ensure compliance with applicable statutory deadlines.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The policy discloses a range of data subject rights applicable depending on user jurisdiction, including access, correction, deletion, portability, restriction, objection, and consent withdrawal; the scope of rights available to a given user depends on their jurisdiction, and the identity verification requirement is an operational step that affects how easily users can exercise these rights.
Users can request access to, correction of, deletion of, or portability of their personal data by submitting a request at https://www.roblox.com/my/account or emailing privacy@roblox.com. The rights available depend on where you live, and Roblox states it will verify your identity before processing requests.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Roblox.