Privacy Policy

MILKYESMOCHI STORE (SSM 202603284697 (TR0351997-M)) runs this website and is responsible for your personal data under Malaysia’s Personal Data Protection Act 2010. For questions or requests, message us on WhatsApp at 011-2802 6120.

• Your Roblox username and user ID, and the public profile and avatar we look up from Roblox.
• Your email address and WhatsApp number.
• Your order: the service, amount, price, game or item, gamepass, and any note you write to the seller.
• For Robux via Login only: your Roblox password and 2-Step Verification backup codes.
• The payment status and reference from the payment gateway. We never see or store your card number or online banking login.
• Your IP address, used for a short time to stop abuse and run the human check. It is not saved with your order.

• To deliver your order.
• To contact you about your order.
• To let you track your order.
• To prevent fraud and abuse.
• To keep the business and tax records Malaysian law requires.

We don’t send marketing messages and we never sell your data.

Your password and backup codes are encrypted as soon as we receive them. Only our staff and the seller delivering your order can see them, and every view is recorded. We delete them as soon as the order ends, whether it is completed, cancelled, expired or refunded.

We never change your email, PIN or account details, and we never ask for your password on WhatsApp.

• The seller delivering your order: your Roblox username and order details, plus your login for Robux via Login.
• The payment gateway that processes your payment.
• Cloudflare, which hosts this website and its database and runs the human check. Cloudflare may store and process data outside Malaysia.
• Roblox: we send your username to Roblox to find your account, and to check your gamepasses or inventory when your service needs it.

We also share data when the law requires it.

We don’t use advertising or analytics cookies. We use only the cookies this site needs to work: one that remembers for 10 minutes that you passed the human check, and one that keeps our staff signed in. Cloudflare’s human check may set its own cookies to tell people from bots.

• Order records, including your email, WhatsApp number and Roblox username: as long as we need them for accounting, tax and disputes, up to 7 years.
• Your Roblox password and backup codes: deleted when the order ends.
• Usernames typed into the account lookup: 7 days.

You can ask to see the personal data we hold about you, ask us to correct it, or ask us to stop using it. Message us on WhatsApp at 011-2802 6120 with your invoice number, and we will reply within 21 days. If you ask us to stop before your order is finished, we may not be able to deliver it.

If you are under 18, ask a parent or guardian before you place an order or share personal data with us.

This site uses HTTPS, Roblox logins are encrypted, and only staff who need your data for an order can see it. Never type your Roblox password anywhere except the Robux via Login form.

If we change this policy, we will update this page and the date at the top. This policy is in English and Malay; if the two differ, the English version applies.