Skip to main content

Roblox Corp

For the period ended Sep 30, 2026. Filed Oct 29, 2026.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Sep 30, 2026 · Filed Oct 29, 2026

RBLX$49.30+3.5%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 349 previous paragraphs and 347 current paragraphs.

280 unchanged; 66 reworded; 1 added; 3 removed; 0 previous and 0 current paragraphs rearranged.

Tables are not compared: 1 previous and 1 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (1)

Current report

•changes designed to make our Platform safer for all of our users;
Removed paragraphs (3)

Previous report

In connection with activity related to mergers, acquisitions, and other strategic transactions, we issued an aggregate of 993,094 shares of our Class A common stock in June 2026.

Previous report

The transactions did not involve any underwriters, underwriting discounts or commissions, or any public offering. We believe the offer, sale, and issuance of the above securities was exempt from registration under the Securities Act (or Regulation D or Regulation S promulgated thereunder) by virtue of Section 4(a)(2) of the Securities Act because the issuance of securities to the recipients did not involve a public offering. The recipients of the securities in each of these transactions represented their intentions to acquire the securities for investment only and not with a view to or for sale in connection with any distribution thereof, and appropriate legends were placed upon the stock certificates issued in these transactions. All recipients had adequate access, through their relationships with us, to information about us. The sales of these securities were made without any general solicitation or advertising.
Reworded paragraphs (66)

Previous wording

We have incurred net losses since our inception, and we expect to continue to incur net losses in the foreseeable future. We incurred net losses attributable to common stockholders of $1,065 million, $935 million, and $1,152 million for the years ended December 31, 2025, 2024, and 2023, respectively. As of June 30, 2026, we had an accumulated deficit of $5,490 million. We also expect our operating expenses to continue to increase, and if our growth does not increase to offset these anticipated increases in our operating expenses, our business, results of operations, and financial condition will be harmed, and we may not be able to achieve or maintain profitability. We expect our costs and investments to continue to increase in future periods as we intend to continue to make investments to grow our business. These efforts may be more costly than we expect and may not result in increased revenue or growth of our business. If we fail to increase our revenue to sufficiently offset the increases in our operating expenses, we will not be able to achieve or maintain profitability in the future.

Current wording

We have incurred net losses since our inception, and we expect to continue to incur net losses in the foreseeable future. We incurred net losses attributable to common stockholders of $1,065 million, $935 million, and $1,152 million for the years ended December 31, 2025, 2024, and 2023, respectively. As of September 30, 2026, we had an accumulated deficit of $5,717 million. We also expect our operating expenses to continue to increase, and if our growth does not increase to offset these anticipated increases in our operating expenses, our business, results of operations, and financial condition will be harmed, and we may not be able to achieve or maintain profitability. We expect our costs and investments to continue to increase in future periods as we intend to continue to make investments to grow our business. These efforts may be more costly than we expect and may not result in increased revenue or growth of our business. If we fail to increase our revenue to sufficiently offset the increases in our operating expenses, we will not be able to achieve or maintain profitability in the future.

Previous wording

As a global platform, we are subject to a myriad of laws and regulations that affect our business, including but not limited to, laws and regulations regarding digital gaming, user-generated content, digital safety, privacy, AI, digital platform liability, social media platforms, content moderation, intellectual property ownership and infringement, consumer protection, protection of minors, anti-competition, taxation, labor, real estate, export and national security, requirements related to the use of parental consent, biometrics, cybersecurity, privacy, data protection, and data localization requirements, the use of prepaid cards, subscriptions, advertising, electronic marketing, illegal content, escheatment, tariffs, anti-corruption, campaign finance, gambling, loot boxes, ratings, telecommunications, and payments regulation, all of which are continuously evolving and developing. In recent periods, there has been increased regulatory scrutiny, investigations, and litigation on areas that impact our business including the protection of minors online, privacy, consumer protection, addictive design, and digital safety overall. The scope and interpretation of laws, regulations, and other requirements that are or may be applicable to us are often uncertain and may differ or conflict from jurisdiction to jurisdiction. We have policies and procedures designed to promote compliance with applicable laws and regulations, but we cannot assure you that authorities will not assert or determine that our practices violate such laws and regulations.

Current wording

As a global platform, we are subject to a myriad of laws and regulations that affect our business, including but not limited to, laws and regulations regarding digital gaming, user-generated content, digital safety, privacy, AI, digital platform liability, social media platforms, content moderation, intellectual property ownership and infringement, consumer protection, protection of minors, anti-competition, taxation, labor, real estate, export and national security, requirements related to the use of parental consent, biometrics, cybersecurity, privacy, data protection, and data localization, the use of prepaid cards, subscriptions, advertising, electronic marketing, illegal content, escheatment, tariffs, anti-corruption, campaign finance, gambling, loot boxes, ratings, telecommunications, and payments regulation, all of which are continuously evolving and developing. In recent periods, there has been increased regulatory scrutiny, investigations, and litigation on areas that impact our business including the protection of minors online, privacy, consumer protection, addictive design, and digital safety overall. The scope and interpretation of laws, regulations, and other requirements that are or may be applicable to us are often uncertain and may differ or conflict from jurisdiction to jurisdiction. We have policies and procedures designed to promote compliance with applicable laws and regulations, but we cannot assure you that authorities will not assert or determine that our practices violate such laws and regulations.

Previous wording

We are subject to global laws and regulations that address digital safety, content moderation, and online platforms with social features. For example, the United Kingdom’s (“U.K.”) Online Safety Act (“OSA”) introduced, among other things, duties to protect children and other users online, complete risk assessments, remove illegal content, and address content harmful to children. On July 10, 2026, we were designated as a Category 1 and 2B Service under the OSA by the Office of Communications, or Ofcom, which imposes additional compliance requirements on us, including publishing a summary of our risk assessments. Noncompliance with the OSA could lead to investigations and other proceedings, substantial fines of up to £18 million or 10% of the prior year’s global revenues, as well as the imposition of product requirements and other measures that could restrict access to the Platform. The EU’s Digital Services Act (“DSA”) imposes content moderation obligations, notice and transparency obligations, protection of minors obligations, advertising restrictions, and other requirements on digital platforms to protect consumers and their rights online. Guidelines for the DSA’s requirements specific to children include, among other matters, age assurance measures, default settings obligations and various other aspects of product design and function, risk assessment obligations, measures to improve moderation and reporting tools, and requirements for parental control tools. Allegations of noncompliance with the DSA can and have led to investigations and other proceedings, such as the Roblox investigation announced in January 2026 by the Netherlands. The DSA imposes significant penalties for non-compliance including fines of up to 6% of annual global revenues, in addition to the ability of civil society organizations and non-governmental organizations to commence class action lawsuits. Brazil’s Digital Statute for Children and Adolescents took effect in March 2026 and includes a number of obligations around default settings, parental controls, transparency, risk assessments, advertisement, localization, and harm prevention. Indonesia has also introduced a series of children’s online safety requirements for digital platforms, with a particular emphasis on the protection of minors, harmful content, addictive design, consumer risks, and contact with unknown persons. Starting March 2026, Indonesia began requiring platforms considered to be high-risk for minors, including Roblox, to implement product changes to lower platform risks or deactivate accounts for children under 16 and submit risk assessments. Australia’s Online Safety Act of 2021 also includes a number of content and product design requirements. We expect such laws and regulations to continue to evolve over time. As our user base in key jurisdictions continues to grow, we expect to be subject to more stringent compliance obligations and increased costs, including annual independent audits, mandatory risk…

Excerpt shortened here; the source contains the full paragraph.

Current wording

We are subject to global laws and regulations that address digital safety, content moderation, and online platforms with social features. For example, the United Kingdom’s (“U.K.”) Online Safety Act (“OSA”) introduced, among other things, duties to protect children and other users online, complete risk assessments, remove illegal content, and address content harmful to children. On July 10, 2026, we were designated as a Category 1 and 2B Service under the OSA by the Office of Communications, or Ofcom, which imposes additional compliance requirements on us, including publishing a summary of our risk assessments. Noncompliance with the OSA could lead to investigations and other proceedings, substantial fines of up to £18 million or 10% of the prior year’s global revenues, as well as the imposition of product requirements and other measures that could restrict access to the Platform. The EU’s Digital Services Act (“DSA”) imposes content moderation obligations, notice and transparency obligations, protection of minors obligations, advertising restrictions, and other requirements on digital platforms to protect consumers and their rights online. Guidelines for the DSA’s requirements specific to children include, among other matters, age assurance measures, default settings obligations and various other aspects of product design and function, risk assessment obligations, measures to improve moderation and reporting tools, and requirements for parental control tools. Allegations of noncompliance with the DSA can and have led to investigations and other proceedings, such as the Roblox investigation announced in January 2026 by the Netherlands. The DSA imposes significant penalties for noncompliance including fines of up to 6% of annual global revenues, in addition to the ability of civil society organizations and non-governmental organizations to commence class action lawsuits where permitted under applicable law. In addition, a digital platform that reaches at least 45 million monthly active users in the EU may be designated by the European Commission as a Very Large Online Platform (“VLOP”) under the DSA. On August 31, 2026, the European Commission designated Roblox as a VLOP, which subjects us to additional rules and compliance obligations, including but not limited to, submitting to an annual audit of our DSA compliance, undertaking assessments of systemic risks and mitigating them, and providing researchers access to data. These additional obligations will become applicable to Roblox starting January 1, 2027. Brazil’s Digital Statute for Children and Adolescents took effect in March 2026 and includes a number of obligations around default settings, parental controls, transparency, risk assessments, advertisement, localization, and harm prevention. Indonesia has also introduced a series of children’s online safety requirements for digital platforms, with a particular emphasis on the protection of minors, harmful content, addictive design, consumer ri…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

In addition to these international laws and regulations, we are subject to U.S. federal and state regulation of digital services accessed and used by children, which vary significantly. Further, states such as Utah, Louisiana, Alabama, and Texas have enacted restrictions, including requiring, among other product changes, parental consent for minors to download applications such as Roblox and/or purchase digital items; age assurance for feature access; and restrictions on spending, communications with strangers, and/or personalized recommendations. Additional states and the federal government are continuing to consider similar proposals. Pending the outcome of relevant constitutional challenges, these additional restrictions may have an adverse impact on our revenue and bookings.

Current wording

In addition to these international laws and regulations, we are subject to U.S. federal and state regulation of digital services accessed and used by children, which vary significantly. Further, states such as Utah, Louisiana, Alabama, and Texas have enacted restrictions, including requiring, among other product changes, parental consent for minors to download applications such as Roblox and/or purchase digital items; age assurance for feature access; and restrictions on spending, communications with strangers, and/or personalized recommendations. Additional states and the federal government are continuing to consider similar or more restrictive proposals. Pending the outcome of relevant constitutional challenges, these additional restrictions may have an adverse impact on our revenue and bookings.

Previous wording

There are also evolving laws and regulations relating to social media. For example, Australia has implemented a ban on social media for children under 16 and France has adopted a ban on social media for children under 15 to take effect as early as September 2026. There are similar discussions and legislative efforts ongoing in numerous jurisdictions around the world related to restricting minors’ access to social media platforms, with a particular emphasis on restricting access to features that may be considered addictive or harmful to minors, with certain legislation and regulation addressing these matters having been enacted. Depending on the scope of covered services, laws and regulations such as these may affect how we configure and present our Platform or our ability to offer our Platform to certain demographics entirely, which may in turn have an adverse impact on our bookings and revenue.

Current wording

There are also evolving laws and regulations relating to social media. For example, Australia has implemented a ban on social media for children under 16. Similar discussions and legislative efforts are ongoing around the world related to restricting minors’ access to social media platforms, including across Europe and Asia, with a particular emphasis on restricting access to features that may be considered addictive or harmful to minors, with certain legislation and regulation addressing these matters having been enacted. Depending on the scope of covered services, laws and regulations such as these may affect how we configure and present our Platform or our ability to offer our Platform to certain demographics entirely, which may in turn have an adverse impact on our bookings and revenue.

Previous wording

In the U.S. and abroad there are ongoing discussions and legislative and executive efforts to remove or restrict the protections from liability for third-party content found under Section 230 of the Communications Decency Act (“CDA”) and similar laws and regulations. For example, in June 2025, the Brazilian Supreme Court ruled that Article 19 of Brazil’s Internet Act is partially unconstitutional, creating platform liability for third-party content in certain instances. The resulting legal framework in Brazil is in flux, but as it stands, platforms that host third-party content like Roblox will be subject to presumptive civil liability for certain categories of content, as well as new regulatory requirements around localization, content moderation, transparency, risk assessment and management, and customer support.

Current wording

In the U.S. and abroad there are ongoing discussions and legislative and executive efforts to remove or restrict the protections from liability for third-party content found under Section 230 of the Communications Decency Act (“CDA”) and similar laws and regulations in other jurisdictions. For example, in May 2026, Brazil passed the Platform Liability Decree, creating platform liability for third-party content in certain instances. As a result, platforms that host third-party content like Roblox are subject to presumptive civil liability in Brazil for certain categories of content, as well as to new regulatory requirements around localization, content moderation, transparency, risk assessment and management, and customer support.

Previous wording

Our efforts to comply with these evolving laws and regulations, as well as uncertainty over their scope and interpretation, have led to, and will continue to lead to, increased operational costs for us, have exposed and will continue to expose us to litigation, fines, or other injunctive and monetary penalties, and harm our brand and reputation if we are, or are alleged to be, unable to comply. To comply with these regulations, in certain jurisdictions and for subsets of our users, we have been required to and could in the future be required to modify or remove certain content on our Platform, change the default settings of our Platform, including for specific account types, modify, restrict access to, or disable certain features or tools on our Platform, including communication features, change our business model for specific jurisdictions or subsets of our users, and take on more onerous obligations, including, but not limited to, applying for government-issued licenses to operate our Platform or offer certain content, establishing a local presence, implementing specified age rating systems, developing localized product offerings and practices, storing user information on servers in a jurisdiction within which users are located, and developing local education initiatives. In addition, certain government authorities have restricted access to or blocked our Platform entirely. These requirements may impact user engagement, the functionality and effectiveness of our Platform, our ability to operate across demographics and geographies, our creators’ ability to monetize their games in some jurisdictions, and reduce the overall use or demand for our Platform, which would harm our business, financial condition, and results of operations. We expect the costs of compliance with, and other burdens imposed by, these laws, regulations, standards, and obligations, to continue to increase and the costs could become prohibitively expensive. Required product or Platform changes may also make our Platform less attractive for or restrict availability to younger users and harm our business, financial condition, and results of operations. We are partnering with the International Age Rating Coalition to facilitate age and content rating assignments for our games by rating authorities across various countries and regions. As we further develop our game rating systems, ratings-based restrictions on our users’ ability to access specific content on our Platform may make our Platform less attractive for younger users and harm our business, financial condition, and results of operations. Moreover, the adoption of any laws or regulations adversely affecting the growth, popularity or use of the internet, including laws impacting internet neutrality, could decrease the demand for our Platform and/or increase our operating costs.

Current wording

Our efforts to comply with these evolving laws and regulations, as well as uncertainty over their scope and interpretation, have led to, and will continue to lead to, increased operational costs for us, have exposed and will continue to expose us to litigation, fines, or other injunctive and monetary penalties, and harm our brand and reputation if we are, or are alleged to be, unable to comply. To comply with these regulations, in certain jurisdictions and for subsets of our users, we have been required to and could in the future be required to modify or remove certain content on our Platform, change the default settings of our Platform, including for specific account types, modify, restrict access to, or disable certain features or tools on our Platform, including communication features, change our business model for specific jurisdictions or subsets of our users, and take on more onerous obligations, including, but not limited to, applying for government-issued licenses to operate our Platform or offer certain content, establishing a local presence, implementing specified age rating systems, developing localized product offerings and practices, storing user information on servers in a jurisdiction within which users are located, and developing local education initiatives. In addition, certain government authorities have restricted access to or blocked our Platform entirely. These requirements may impact user engagement, the functionality and effectiveness of our Platform, our ability to operate across demographics and geographies, our creators’ ability to monetize their games in some jurisdictions, and reduce the overall use or demand for our Platform, which would harm our business, financial condition, and results of operations. We expect the costs of compliance with, and other burdens imposed by, these laws, regulations, standards, and obligations, to continue to increase and the costs could become prohibitively expensive. Required product or Platform changes may also make our Platform less attractive for or restrict availability to younger users and harm our business, financial condition, and results of operations. We are partnering with the International Age Rating Coalition to facilitate age and content rating assignments for our games by rating authorities from various countries and regions. As we further develop our game rating systems, ratings-based restrictions limiting access to specific content due to factors such as age or region may make our Platform less attractive and harm our business, financial condition, and results of operations. Moreover, the adoption of any laws or regulations adversely affecting the growth, popularity, or use of the internet, including laws impacting internet neutrality, could decrease the demand for our Platform and/or increase our operating costs.

Previous wording

We invest significant technical and human resources to proactively identify inappropriate content and activity on our Platform, including leveraging text-filtering, voice moderation, content moderation, and other automated systems powered by AI. We provide our users with the ability to report activity that they find objectionable or which they believe violates our terms of service or Community Standards, and also provide customizable controls for parents and caregivers to restrict children’s access to games and communication features. We also recently launched Roblox Kids and Roblox Select, which are age-based account types designed to provide children and younger teens with age-appropriate games and safety features. We work closely with regulators, authorities, and safety groups in many countries to promptly report illegal content, and also partner with leading global organizations and members of our community for continued input on the safety features of our Platform.

Current wording

We invest significant technical and human resources to proactively identify inappropriate content and activity on our Platform, including leveraging text-filtering, voice moderation, content moderation, and other automated systems powered by AI. We provide our users with the ability to report activity that they find objectionable or which they believe violates our terms of use or Community Standards, and also provide customizable controls for parents and caregivers to restrict children’s access to games and communication features. In the first half of 2026, we also launched Roblox Kids and Roblox Select, which are age-based account types designed to provide children and younger teens with age-appropriate games and safety features. We work closely with regulators, authorities, and safety groups in many countries to promptly report illegal content, and also partner with leading global organizations and members of our community for continued input on the safety features of our Platform.

Previous wording

Notwithstanding our efforts and significant investment, bad actors have and may continue to circumvent our moderation and safety systems by engaging in activities including, but not limited to, uploading or generating inappropriate content, creating inappropriate environments or content in otherwise non-violative games by engaging in offensive behavior, or directing users off-Platform to less moderated third-party platforms to engage in inappropriate behavior. The occurrence of these activities can and has led to reputational harm, legal actions, and regulatory scrutiny on certain occasions, which could adversely affect our business and financial results. Such activities have and will continue to evolve in their complexity as bad actors become more sophisticated, including through the use of AI, which will require us to continue investing significant technical and human resources.

Current wording

Notwithstanding our efforts and significant investment, bad actors have and may continue to circumvent our moderation and safety systems by engaging in activities including, but not limited to, uploading or generating inappropriate content, bypassing our text-filtering and chat moderation systems, creating inappropriate environments or content in otherwise non-violative games by engaging in offensive behavior, or directing users off-Platform to less moderated third-party platforms to engage in inappropriate behavior. The occurrence of these activities can and has led to reputational harm, regulatory scrutiny, and legal actions, which could adversely affect our business and financial results. Such activities have and will continue to evolve in their complexity as bad actors become more sophisticated, including through the use of AI, which will require us to continue investing significant technical and human resources.

Previous wording

Beginning in January 2026, we implemented mandatory age-check systems in all chat-enabled regions designed to check a user’s age prior to accessing chat on our Platform. Notwithstanding our efforts, from time to time users have been able to evade our systems and our age-check methodology has misclassified a user’s age. Evasion of our systems, misrepresentations of user age, or inaccuracies with our age-checking technology or policies have led to and may continue to lead to users being exposed to inappropriate content or behavior by participating in games that are not age-appropriate or gaining access to features we have restricted to older users. We have at times experienced negative media coverage related to content that may be age-inappropriate but younger users have accessed, and inaccuracies with our age-checking technology. In addition, as more of our brand partners and creators offer physical products for sale through our Platform, younger users may be able to purchase products that may not be age-appropriate. Unintentional access to content or physical products could cause harm to our audience and to our reputation of providing a safe environment for younger users.

Current wording

Beginning in January 2026, we implemented mandatory age-check systems in all chat-enabled regions designed to check a user’s age prior to accessing chat on our Platform. Notwithstanding our efforts, from time to time users have been able to evade our systems and our age-check methodology has misclassified a user’s age. Evasion of our systems, misrepresentations of user age, or inaccuracies with our age-checking technology or policies have led to and may continue to lead to users being exposed to inappropriate content or behavior by participating in games that are not age-appropriate or gaining access to features we have restricted to older users. We have experienced negative media coverage related to content that may be age-inappropriate but younger users have accessed, and inaccuracies with our age-checking technology. In addition, as more of our brand partners and creators offer physical products for sale through our Platform, younger users may be able to purchase products that may not be age-appropriate. Unintentional access to content or physical products could cause harm to our audience and to our reputation of providing a safe environment for younger users.

Previous wording

In addition, we have statutory obligations under U.S. federal law to block access to and remove child pornography and report apparent offenses to the National Center for Missing and Exploited Children. Under the OSA, we have an additional set of obligations regarding content relating to child sexual abuse and exploitation (“CSEA”) on our Platform. CSEA content is considered to be one type of “priority illegal content,” which we are required to prevent individuals from encountering and swiftly take down if we are made aware. We are also required to report detected CSEA content on our Platform to the relevant authorities. While we have dedicated technology and trained human moderator staff that can detect and remove sexual content involving children, there have been instances where such content has been uploaded, and any unintentional future non-compliance by us or allegations of non-compliance by us with respect to applicable domestic and international laws and regulations relating to child pornography and the sexual exploitation of children could significantly harm our reputation, create liability, and be costly and time consuming to address or defend. We expect laws and regulations relating to CSEA content to continue to evolve over time and we expect to be subject to increased scrutiny as a result.

Current wording

In addition, we have statutory obligations under U.S. federal law to block access to and remove child pornography and report apparent offenses to the National Center for Missing and Exploited Children. In the U.K. and Australia, among other jurisdictions, we have additional obligations regarding content relating to child sexual abuse and exploitation (“CSEA”) on our Platform, including preventing individuals from encountering CSEA content, swiftly taking down such content if we are made aware of it, and reporting detected CSEA content to the relevant authorities. While we have dedicated technology and trained human moderator staff that can detect and remove sexual content involving children, there have been instances where such content has been uploaded, and any unintentional future noncompliance by us or allegations of noncompliance by us with respect to applicable domestic and international laws and regulations relating to child pornography and the sexual exploitation of children could significantly harm our reputation, create liability, and be costly and time consuming to address or defend. We expect laws and regulations relating to CSEA content to continue to evolve over time and we expect to be subject to increased scrutiny as a result.

Previous wording

We believe that maintaining, protecting, and enhancing our reputation and brand is critical to grow the number of creators and users on our Platform, especially given the safe and civil atmosphere that we strive to achieve for our users, many of whom are children. Maintaining, protecting, and enhancing our brand will depend largely on our ability to continue to provide reliable high-quality, engaging, and shared content on our Platform. If users or creators do not perceive our Platform to be reliable or of high quality, the value of our brand could diminish, thereby decreasing the attractiveness of our Platform. Further, we have faced and are currently defending against claims by private parties as well as regulators such as state attorneys general alleging that our Platform has been used by criminal offenders to identify and communicate with children and to possibly entice them to interact off-Platform, outside of the restrictions of our moderated chat, content blockers, and other on-Platform safety measures. While we devote considerable resources to prevent this from occurring, we are unable to prevent all such interactions from taking place. We have also received and expect to continue to receive a high degree of media coverage alleging the use of our Platform for illicit or objectionable ends. For example, we have experienced negative media publicity from traditional media sources and self-described short seller investors related to the age of some of our creators, the content that creators produce, our operating metrics and disclosures, the strength of our moderation practices, and the conduct of users on our Platform that may be deemed illicit, explicit, profane, or otherwise objectionable. Additional unfavorable publicity has covered, and may in the future cover, our privacy, cybersecurity or data protection practices, terms of service, including our advertising policies, product changes, product quality, litigation or regulatory activity, our trust and safety efforts, accusations that certain of our trust and safety efforts favor certain viewpoints or suppress freedom of expression, our use of and policies regarding generative AI, and the actions of our users and creators.

Current wording

We believe that maintaining, protecting, and enhancing our reputation and brand is critical to grow the number of creators and users on our Platform, especially given the safe and civil atmosphere that we strive to achieve for our users, many of whom are children. Maintaining, protecting, and enhancing our brand will depend largely on our ability to continue to provide reliable high-quality, engaging, and shared content on our Platform. If users or creators do not perceive our Platform to be reliable or of high quality, the value of our brand could diminish, thereby decreasing the attractiveness of our Platform. Further, we have faced and are currently defending against claims by private parties as well as regulators such as state attorneys general alleging that our Platform has been used by criminal offenders to identify and communicate with children and to possibly entice them to interact off-Platform, outside of the restrictions of our moderated chat, content blockers, and other on-Platform safety measures. While we devote considerable resources to prevent this from occurring, we are unable to prevent all such interactions from taking place. We have also received and expect to continue to receive a high degree of media coverage alleging the use of our Platform for illicit or objectionable ends. For example, we have experienced negative media publicity from traditional media sources and self-described short seller investors related to the age of some of our creators, the content that creators produce, our operating metrics and disclosures, the strength of our moderation practices, and the conduct of users on our Platform that may be deemed illicit, explicit, profane, or otherwise objectionable. Additional unfavorable publicity has covered, and may in the future cover, our privacy, cybersecurity or data protection practices, terms of use, including our advertising policies, product changes, product quality, litigation or regulatory activity, our trust and safety efforts, accusations that certain of our trust and safety efforts favor certain viewpoints or suppress freedom of expression, our use of and policies regarding generative AI, and the actions of our users and creators.

Previous wording

For the three months ended June 30, 2026, 25% of our revenue was attributable to Robux sales through the Apple App Store and 15% of our revenue was attributable to Robux sales through the Google Play Store. Because of the significant use of our Platform on mobile devices, our application must remain interoperable with these and other popular mobile app stores and platforms, and related hardware. We are subject to the standard policies and terms of service of these operating systems, as well as policies and terms of service of the various software application stores that make our application and games available to our creators and users. These policies and terms of service govern the availability, promotion, distribution, content, and operation of applications and games on such operating systems and stores. Each provider of these operating systems and stores has broad discretion to change and interpret its terms of service and policies with respect to our Platform and those changes may be unfavorable to us and our creators’ and users’ use of our Platform. If an operating system provider or application store limits or discontinues access to, or changes the terms governing, its operating system or store for any reason, it could adversely affect our business, financial condition, or results of operations.

Current wording

For the three months ended September 30, 2026, 24% of our revenue was attributable to Robux sales through the Apple App Store and 15% of our revenue was attributable to Robux sales through the Google Play Store. Because of the significant use of our Platform on mobile devices, our application must remain interoperable with these and other popular mobile app stores and platforms, and related hardware. We are subject to the standard policies and terms of service of these operating systems, as well as policies and terms of service of the various software application stores that make our application and games available to our creators and users. These policies and terms of service govern the availability, promotion, distribution, content, and operation of applications and games on such operating systems and stores. Each provider of these operating systems and stores has broad discretion to change and interpret its terms of service and policies with respect to our Platform and those changes may be unfavorable to us and our creators’ and users’ use of our Platform. If an operating system provider or application store limits or discontinues access to, or changes the terms governing, its operating system or store for any reason, it could adversely affect our business, financial condition, or results of operations.

Previous wording

We rely on third-party distribution channels and third-party payment processors to facilitate purchases by our Platform users. If we are unable to maintain a good relationship with such providers, if their terms and conditions change, or if we fail to process or ensure the safety of users’ payments, our business will suffer.

Current wording

We rely on third-party distribution channels and third-party payment processors to facilitate purchases by our Platform users and payments to creators. If we are unable to maintain a good relationship with such providers, if their terms and conditions change, or if we fail to process or ensure the safety of payments, our business will suffer.

Previous wording

Additionally, we do not directly process purchases made on our Platform or payments to our creators under our Developer Exchange Program. Information on those purchases or under our Developer Exchange Program (e.g., debit and credit card numbers and expiration dates, personal information, including bank account information, and billing addresses) is disclosed to the third-party online platforms and service providers (such as Stripe, Xsolla, and Tipalti). We do not have control over the security measures of those providers, and their security measures may not be adequate. We could be exposed to litigation and possible liability if our users’ (including our creators’) transaction information are compromised, which could harm our reputation and our ability to attract users and may materially adversely affect our business.

Current wording

In addition to purchases made on our Platform, payments to our creators are processed by third-party financial services providers. Information related to those purchases and payments (e.g., debit and credit card numbers and expiration dates, personal information, including tax identification number, bank account information, and billing addresses) is disclosed to the third-party online platforms and service providers. We do not have control over the security measures of those providers, and their security measures may not be adequate. We could be exposed to litigation, possible liability, and/or regulatory notification obligations if our users’ or creators’ transaction information is compromised, which could harm our reputation and our ability to attract users and may materially adversely affect our business.

Previous wording

We also rely on the stability of such distribution channels and their payment transmissions, and third-party payment processors for the continued payment services provided to our users and creators. If any of these providers fail to process or ensure the security of users’ payments for any reason, our reputation may be damaged and we may lose our paying users, creators may lose interest in our Developer Exchange Program, creators may be discouraged from creating on our Platform, and users may be discouraged from making purchases on our Platform, which, in turn, would materially and adversely affect our business, financial condition, and prospects.

Current wording

We also rely on the stability of such distribution channels and their payment transmissions, and third-party payment processors for the continued payment services provided to our users and creators. If any of these providers fail to process or ensure the security of users’ payments for any reason, our reputation may be damaged and we may lose our paying users, creators may lose interest in our Developer Exchange Program or other creator payment programs we may introduce in the future, such as Roblox Wallet, creators may be discouraged from creating on our Platform, and users may be discouraged from making purchases on our Platform. The occurrence of these and other factors could materially and adversely affect our business, financial condition, and prospects.

Previous wording

We are subject to numerous legal proceedings and expect to continue to be the target of litigation and regulatory scrutiny globally. The legal proceedings have involved or could involve claims by private parties as well as regulators such as state attorneys general that arise in the ordinary course of business, including intellectual property, privacy, biometrics, cybersecurity, data protection, consumer protection, product liability, addictive design, false and misleading advertising, employment, class action, fiduciary duty and governance matters, whistleblower, contract, securities, tort, the civil provisions of the Racketeer Influenced and Corrupt Organizations Act, human trafficking, unfair competition, the False Claims Act, unclaimed property, the use of generative AI, and our reincorporation from Delaware to Nevada that was completed in May 2025. We are and may continue to be subject to legal proceedings asserting claims arising from allegations that we have facilitated gambling by users of our Platform including by minors, that our Platform is unsafe, that we have misrepresented the safety of our Platform, that we have failed to warn of or misrepresented the risk of encountering bad actors on our Platform, that we provide inadequate safety controls on our Platform, that our Platform is addictive, that our terms of use are not enforceable against minors, that we unlawfully or unfairly benefit from child labor, that we have misrepresented information about our user base, that we have engaged in copyright infringement, that we have engaged in unlawful employment practices, and suits related to our refund policies. A number of cases have been filed in federal or state court against us alleging that our Platform design, moderation systems, and safety safeguards have been insufficient to protect minor users from predatory behavior and sexual exploitation and asserting various claims including negligence, design defect, failure to warn, and fraudulent misrepresentation. Additional cases have been filed in federal or state court against us related to allegations of addictive design. We have been and may continue to be subject to legal proceedings asserting claims on behalf of shareholders related to allegations that discussions of our growth prospects have been misleading and unsustainable due to concerns related to safety, our implementation of parental controls, age-check systems, other trust and safety efforts, and the impact of viral content, as well as claims that our leadership has engaged in insider trading. Various state attorneys general have commenced investigations, filed claims, or announced the intent to commence investigations or file claims against us based on various state laws and causes of action primarily relating to youth-related consumer protection and digital safety matters. We have entered into settlement agreements and are in negotiations or considering entering into settlement negotiations with certain states regarding th…

Excerpt shortened here; the source contains the full paragraph.

Current wording

We are subject to numerous legal proceedings and expect to continue to be the target of litigation and regulatory scrutiny globally. The legal proceedings have involved or could involve claims by private parties as well as regulators, including state attorneys general and federal agencies, that arise in the ordinary course of business, including intellectual property, privacy, biometrics, cybersecurity, data protection, consumer protection, product liability, addictive design, false and misleading advertising, employment, class action, fiduciary duty and governance matters, whistleblower, contract, securities, tort, the civil provisions of the Racketeer Influenced and Corrupt Organizations Act, human trafficking, unfair competition, the False Claims Act, unclaimed property, the use of generative AI, and our reincorporation from Delaware to Nevada that was completed in May 2025. We are and may continue to be subject to legal proceedings asserting claims arising from allegations that we have facilitated gambling by users of our Platform, including by minors, that our Platform is unsafe, that we have misrepresented the safety of our Platform, that we have failed to warn of or misrepresented the risk of encountering bad actors on our Platform, that we provide inadequate safety controls on our Platform, that our Platform is addictive, that our terms of use are not enforceable against minors, that we unlawfully or unfairly benefit from child labor, that we are in violation of child privacy laws and have misrepresented our compliance with such laws, that we have failed to comply with consumer protection laws, that we have misrepresented information about our user base, that we have engaged in copyright infringement and/or other violations of intellectual property laws, that we have engaged in unlawful employment practices, and suits related to our refund policies. A number of cases have been filed in federal or state court against us alleging that our Platform design, moderation systems, and safety safeguards have been insufficient to protect minor users from predatory behavior and sexual exploitation and asserting various claims including negligence, design defect, failure to warn, and fraudulent or negligent misrepresentation. Additional cases have been filed in federal or state court against us related to allegations of addictive design. We have been and may continue to be subject to legal proceedings asserting claims on behalf of stockholders related to allegations that discussions of our growth prospects have been misleading and unsustainable due to concerns related to safety, our implementation of parental controls, age-check systems, other trust and safety efforts, and the impact of viral content, as well as claims that our leadership has engaged in insider trading. Numerous regulators, including state attorneys general and the FTC, have commenced investigations, filed claims, or announced the intent to commence investigations or file claims agai…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

In addition, our strategy seeks to expand the demographic make-up of our user base. If and when we achieve maximum market penetration rates among any particular user cohort overall and in particular geographic markets, future growth in DAUs will need to come from other demographic cohorts, which may be difficult, costly, or time consuming for us to achieve. As we are better able to estimate the demographic makeup of our user base, our product and growth strategies may need to evolve. We continue to expand safety initiatives on our Platform, and such initiatives have impacted and may continue to impact our business in any given period, including overall user engagement, the potential popularity and virality of content, and our financial performance. Although we continue to believe that increasing safety on our Platform is a long-term strategic advantage, there can be no guarantee that our current and future safety efforts will not materially harm our business in the long term. Accessibility to the internet and bandwidth or connectivity limitations as well as regulatory requirements, may also affect our ability to further expand our user base in a variety of geographies, and we may not be able to achieve our goal of capturing 10% of the global gaming content market. Fluctuations or declines in the growth rate of any of our key metrics, such as DAUs or hours engaged, could significantly harm our financial performance.

Current wording

In addition, our strategy seeks to expand the demographic makeup of our user base. If and when we achieve maximum market penetration rates among any particular user cohort overall and in particular geographic markets, future growth in DAUs will need to come from other demographic cohorts, which may be difficult, costly, or time consuming for us to achieve. As we are better able to estimate the demographic makeup of our user base, our product and growth strategies may need to evolve. We continue to expand safety initiatives on our Platform, and such initiatives have impacted and may continue to impact our business in any given period, including overall user engagement, the potential popularity and virality of content, and our financial performance. Although we continue to believe that increasing safety on our Platform is a long-term strategic advantage, there can be no guarantee that our current and future safety efforts will not materially harm our business in the long term. Accessibility to the internet and bandwidth or connectivity limitations as well as regulatory requirements, may also affect our ability to further expand our user base in a variety of geographies, and we may not be able to achieve our goal of capturing 10% of the global gaming content market. Fluctuations or declines in the growth rate of any of our key metrics, such as DAUs or hours engaged, could significantly harm our financial performance.

Previous wording

Our Platform relies on our creators to create games and virtual items on our Platform for our users, and we believe the interactions between and within the creator and user communities on our Platform create a thriving and organic ecosystem. To facilitate and incentivize the creation of games and virtual items by creators, our Platform offers creators an opportunity to accumulate Robux, a virtual currency on our Platform, which, as described in our terms of use, is a license to engage in games and/or obtain virtual items. When virtual items are acquired on our Platform, the originating creator accumulates a portion of the Robux paid for the item. Creators are paid fiat currency based on the amount of earned Robux they have accumulated under certain conditions outlined in our Developer Exchange Program. In addition, we have paid access games where creators can offer access to their games to users for a set price in fiat currency and in exchange earn a higher revenue share of these user purchases.

Current wording

Our Platform relies on our creators to create games and virtual items on our Platform for our users, and we believe the interactions between and within the creator and user communities on our Platform create a thriving and organic ecosystem. To facilitate and incentivize the creation of games and virtual items by creators, our Platform offers creators an opportunity to accumulate Robux, a virtual currency on our Platform, which, as described in our terms of use, is a license to engage in games and/or obtain virtual items. When virtual items are acquired on our Platform, the originating creator accumulates a portion of the Robux paid for the item. Creators are currently paid fiat currency based on the amount of earned Robux they have accumulated under certain conditions outlined in our Developer Exchange Program. As we shift to Roblox Wallet in the future, eligible creators will be able to opt into receiving their revenue share in fiat currency directly instead of accumulating and exchanging Robux earned through our Developer Exchange Program. In addition, we have paid access games where creators can offer access to their games to users for a set price in fiat currency and in exchange earn a higher revenue share of these user purchases.

Previous wording

We compete to attract and retain creators with gaming and metaverse platforms such as Epic Games, Unity, Meta Platforms, and Valve, which also give creators the ability to create or distribute interactive content, and we expect competition to continue to increase in the future. We generally do not have any agreements with our creators that require them to continue to use our Platform for any time period. Some of our creators have developed attractive businesses in developing content, including games, on our Platform. Many of our existing competitors have, and some of our potential competitors could have, substantial competitive advantages, such as larger sales and marketing budgets and resources; broader and more established relationships with our target demographics; greater resources to make acquisitions and enter into strategic partnerships; lower labor and research and development costs; larger and more mature intellectual property portfolios; and substantially greater financial, technical, and other resources. We continue to update our Platform and policies in an effort to increase creator earnings to further incentivize them to build on our Platform, but there can be no guarantee that these efforts will be successful. If we are unable to continue attracting and retaining creators and they elect to develop content on other platforms, this could result in an overall reduction in the quantity and quality of our content, make our Platform less appealing for creators, and harm our results of operations.

Current wording

We compete to attract and retain creators with gaming and metaverse platforms such as Epic Games, Unity, Meta Platforms, Valve, and Google, which also give creators the ability to create or distribute interactive content, and we expect competition to continue to increase in the future. We generally do not have any agreements with our creators that require them to continue to use our Platform for any time period. Some of our creators have developed attractive businesses in developing content, including games, on our Platform. Many of our existing competitors have, and some of our potential competitors could have, substantial competitive advantages, such as larger sales and marketing budgets and resources; broader and more established relationships with our target demographics; greater resources to make acquisitions and enter into strategic partnerships; lower labor and research and development costs; larger and more mature intellectual property portfolios; and substantially greater financial, technical, and other resources. We continue to update our Platform and policies in an effort to increase creator earnings to further incentivize them to build on our Platform, but there can be no guarantee that these efforts will be successful. If we are unable to continue attracting and retaining creators and they elect to develop content on other platforms, this could result in an overall reduction in the quantity and quality of our content, make our Platform less appealing for creators, and harm our results of operations.

Previous wording

•if paying users reduce their spend on our Platform due to reasons such as the need to reduce household expenses or the perception that competitive services provide better value.

Current wording

•our paying users reduce their spend on our Platform due to reasons such as the need to reduce household expenses or the perception that competitive services provide better value.

Previous wording

The techniques used by malicious actors to obtain unauthorized access to, or to sabotage, our systems or networks, or to utilize our systems maliciously, are constantly evolving and generally are not identified as a threat vector until launched against a target. Threat actors are also increasingly leveraging AI, including agentic AI systems, to conduct reconnaissance, exploit vulnerabilities, craft highly personalized social engineering attacks, and adapt their methods in real time without human intervention. These AI-driven techniques may enable attackers to operate at a speed, scale, and degree of sophistication that outpaces our ability to detect and respond to threats. In addition to actions by individuals, such attacks could also potentially be launched by nation states, state-sponsored bad actors, or other well-funded and highly sophisticated individuals. Despite the measures we have taken, we at times have not been able to anticipate these techniques by implementing preventive measures, detecting, or reacting in a timely manner, which has resulted in and could continue to result in, delays in our detection or remediation of, or other responses to, security breaches and other security-related incidents. In addition, the use of open source and third-party software in our Platform has exposed us to security vulnerabilities in the past and will likely continue to expose us to security vulnerabilities in the future.

Current wording

The techniques used by malicious actors to obtain unauthorized access to, or to sabotage, our systems or networks, or to utilize our systems maliciously, are constantly evolving and generally are not identified as a threat vector until launched against a target. Threat actors are also increasingly leveraging AI, including agentic AI systems, to conduct reconnaissance, identify and exploit vulnerabilities, craft highly personalized social engineering attacks, and adapt their methods in real time without human intervention. These AI-driven techniques may enable attackers to operate at a speed, scale, and degree of sophistication that outpaces our ability to detect and respond to threats. In addition to actions by individuals, such attacks could also potentially be launched by nation states, state-sponsored bad actors, or other well-funded and highly sophisticated individuals. Despite the measures we have taken, we at times have not been able to anticipate these techniques by implementing preventive measures, detecting, or reacting in a timely manner, which has resulted in and could continue to result in, delays in our detection or remediation of, or other responses to, security breaches and other security-related incidents. In addition, the use of open source and third-party software in our Platform has exposed us to security vulnerabilities in the past and will likely continue to expose us to security vulnerabilities in the future.

Previous wording

The use of AI in our products and business practices may increase or create additional cybersecurity and privacy risks, including risks of data breaches and security incidents. In particular, the deployment of agentic AI introduces new attack surfaces and risk profiles for us to address. Prompt injection attacks, in which malicious instructions cause an AI agent to take unintended or unauthorized actions, are an emerging threat vector for which established defenses are still developing. As AI use expands across our products and operations, we expect the frequency and sophistication of AI-targeted attacks to increase. Beyond external threats, agentic AI systems operating with limited human oversight at each step may also inadvertently expose proprietary or confidential information by autonomously executing tasks across data boundaries without explicit human authorization.

Current wording

The use of AI in our products and business practices may increase or create additional cybersecurity and privacy risks, including risks of unauthorized disclosure or exposure of data, breaches, and other security incidents. In particular, the deployment of agentic AI introduces new attack surfaces and risk profiles for us to address. Prompt injection attacks, in which malicious instructions cause an AI agent to take unintended or unauthorized actions, are an emerging threat vector for which established defenses are still developing. As AI use expands across our products and operations, we expect the scale, frequency, and sophistication of AI-targeted attacks to increase. Beyond external threats, agentic AI systems operating with limited human oversight at each step may also inadvertently expose proprietary or confidential information by autonomously executing tasks across data boundaries without explicit human authorization.

Previous wording

Our Platform and services operate in conjunction with, and we are dependent upon, third-party products, services, and components. Our reliance on third-party service providers, including cloud infrastructure providers, payment processors, analytics tools, distribution channels, and customer support providers and platforms, introduces significant and evolving risks related to cybersecurity and data privacy. These risks extend to the third-party AI models, tools, and services that we and our service providers increasingly incorporate into our operations. AI components sourced from third parties may contain vulnerabilities, behave in unintended ways, or be compromised before or after integration with our systems. As AI systems become more autonomous and interconnected, a security failure in a third-party AI component could have cascading effects across our Platform. We do not have complete visibility into or control over the development, training, and security practices of all third-party AI providers in our supply chain, and our contractual protections, vendor assessments, and monitoring capabilities may not be sufficient to prevent or promptly identify such issues.

Current wording

Our Platform and services operate in conjunction with, and we are dependent upon, third-party products, services, and components. Our reliance on third-party service providers, including cloud infrastructure providers, payment processors, analytics tools, distribution channels, and customer support providers and platforms, introduces significant and evolving risks related to cybersecurity and data privacy. These risks extend to the third-party AI models, tools, and services that we and our service providers increasingly incorporate into our operations. AI components sourced from third parties may contain vulnerabilities, behave in unintended ways, or be compromised before or after integration with our systems. As AI systems become more autonomous and interconnected, a security failure in a third-party AI component could have cascading effects across our Platform. We do not have complete visibility into or control over the development, training, and security practices of all third-party AI providers in our supply chain, and our contractual protections, vendor assessments, and monitoring capabilities may not be sufficient to prevent or promptly identify such issues in all cases.

Previous wording

In addition, global laws and regulations relating to cybersecurity continue to evolve in their scope and complexity. For example, the EU’s Network and Information Systems Directive 2 (“NIS2”) and its implementing laws impose mandatory cybersecurity risk-management and incident reporting obligations on entities operating in a number of sectors, including social networking service platforms. Non-compliance may result in fines of up to the greater of €10 million or 2% of total worldwide annual turnover. NIS2 also introduces personal liability for management personnel, who may face temporary prohibition from exercising managerial functions for serious non-compliance. The EU’s Cyber Resilience Act also imposes mandatory cybersecurity requirements on products with digital elements placed on the EU market, including incident reporting and core product obligations. Non-compliance may result in fines of up to the greater of €15 million or 2.5% of total worldwide annual turnover, and market surveillance authorities may order product withdrawal from the EU market. Our efforts to comply with evolving laws and regulations such as these have and could continue to lead to increased operational costs and we could be exposed to fines, product withdrawal orders, reputational harm, and other adverse impacts to our business if we are, or are alleged to be, unable to comply.

Current wording

In addition, global laws and regulations relating to cybersecurity continue to evolve in their scope and complexity. For example, the EU’s Network and Information Systems Directive 2 (“NIS2”) and its implementing laws impose mandatory cybersecurity risk-management and incident reporting obligations on entities operating in a number of sectors, including social networking service platforms. Noncompliance may result in fines of up to the greater of €10 million or 2% of total worldwide annual turnover. NIS2 also introduces personal liability for management personnel, who may face temporary prohibition from exercising managerial functions for serious noncompliance. The EU’s Cyber Resilience Act also imposes mandatory cybersecurity requirements on products with digital elements placed on the EU market, including actively exploited vulnerability reporting, incident reporting, and core product obligations. Noncompliance may result in fines of up to the greater of €15 million or 2.5% of total worldwide annual turnover, and market surveillance authorities may order product withdrawal from the EU market. Our efforts to comply with evolving laws and regulations such as these have and could continue to lead to increased operational costs and we could be exposed to fines, product withdrawal orders, reputational harm, and other adverse impacts to our business if we are, or are alleged to be, unable to comply.

Previous wording

We operate our Platform throughout the world and are subject to risks and challenges associated with international business which require considerable management attention and resources. For the three months ended June 30, 2026, approximately 82% of our DAUs and 43% of our revenue was derived from outside the U.S. and Canada region. We intend to continue to expand internationally, and this expansion is a critical element of our future business strategy. However, as we continue to expand internationally, including into developing countries where consumer discretionary spending is relatively weak, while our DAUs increase, the growth rate of our bookings could decelerate due to weaker spending by users from those regions, and our ABPDAU has been and may continue to be negatively impacted. While we have data centers, contractors, creators, and users outside of the U.S., we have limited offices located outside of the U.S. and Canada, and there is no guarantee that our international expansion efforts will be successful. The risks and challenges associated with expanding our international presence and operations include the below, and the occurrence of these and other factors could harm our ability to generate revenue and bookings outside of the U.S. and, consequently, adversely affect our business, financial condition, and results of operations:

Current wording

We operate our Platform throughout the world and are subject to risks and challenges associated with international business which require considerable management attention and resources. For the three months ended September 30, 2026, approximately 83% of our DAUs and 43% of our revenue was derived from outside the U.S. and Canada region. We intend to continue to expand internationally, and this expansion is a critical element of our future business strategy. However, as we continue to expand internationally, including into developing countries where consumer discretionary spending is relatively weak, while our DAUs increase, the growth rate of our bookings could decelerate due to weaker spending by users from those regions, and our ABPDAU has been and may continue to be negatively impacted. While we have data centers, contractors, creators, and users outside of the U.S., we have limited offices located outside of the U.S. and Canada, and there is no guarantee that our international expansion efforts will be successful. The risks and challenges associated with expanding our international presence and operations include the below, and the occurrence of these and other factors could harm our ability to generate revenue and bookings outside of the U.S. and, consequently, adversely affect our business, financial condition, and results of operations:

Previous wording

•our Platform being blocked in certain countries entirely, such as the Republic of Türkiye and certain Middle Eastern countries;

Current wording

•our Platform being blocked in certain countries entirely, such as the Republic of Türkiye and certain Middle Eastern and North African countries;

Previous wording

•Our continued success significantly depends on our ability to effectively navigate the integration of rapidly evolving technologies such as generative AI into our business and address their impact on our threat landscape.

Current wording

Our continued success significantly depends on our ability to effectively navigate the integration of rapidly evolving technologies such as AI into our business and address their impact on our threat landscape.

Previous wording

The market for an immersive platform for connection and communication is a new and evolving market characterized by rapid, complex, and disruptive changes in technology and user and creator demands that could make it difficult for us to effectively compete. The expectations and needs of our users and creators are constantly evolving. Our future success depends on a variety of factors, including our continued ability to innovate, introduce new products and services efficiently, enhance and integrate our products and services in a timely, safe, secure, and cost-effective manner, extend our core technology into new applications, and anticipate technological developments. If we are unable to react quickly to new technology trends compared to our competitors — such as the continued growth of AI solutions which affect the ways creators create games, the way users consume virtual content, or the degree to which we can safely integrate AI systems — it may harm our business and results of operations. Conversely, our adoption of AI solutions and changes to our AI policies may not be favored by our community of creators and users, and may result in diminished engagement on our Platform. For example, creators may view the increased deployment of AI tools on our Platform as competitive with human-created content or that AI-created content is inferior to human-created content. Expertise in AI, as well as other emerging technologies, is difficult and costly to obtain given the increasing focus on AI development and competition for talent. Further, legal, social, and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional legal, security, and research and development costs to resolve such issues. If we enable or offer solutions that draw controversy due to their perceived or actual impact on society, we may experience brand or reputational harm, competitive harm, or legal liability. Failure to address AI ethics issues by us or others in our industry could undermine public confidence in our use of AI.

Current wording

The market for an immersive platform for connection and communication is a new and evolving market characterized by rapid, complex, and disruptive changes in technology and user and creator demands that could make it difficult for us to effectively compete. The expectations and needs of our users and creators are constantly evolving. Our future success depends on a variety of factors, including our continued ability to innovate, introduce new products and services efficiently, enhance and integrate our products and services in a timely, safe, secure, and cost-effective manner, extend our core technology into new applications, and anticipate technological developments. If we are unable to react quickly to new technology trends compared to our competitors — such as the continued growth of AI solutions which affect the ways creators create games, the way users consume virtual content, or the degree to which we can safely integrate AI systems — it may harm our business and results of operations. Conversely, our adoption of AI solutions and changes to our AI policies may not be favored by our community of creators and users, and may result in diminished engagement on our Platform. For example, creators may view the increased deployment of AI tools on our Platform as competitive with human-created content or that AI-created content is inferior to human-created content. AI tools may also make it easier for third parties to replicate popular content both on and off our Platform, which could result in unauthorized or infringing content and divert engagement from creators and our Platform generally. Expertise in AI, as well as other emerging technologies, is difficult and costly to obtain given the increasing focus on AI development and competition for talent. Further, legal, social, and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional legal, security, and research and development costs to resolve such issues. If we enable or offer solutions that draw controversy due to their perceived or actual impact on society, we may experience brand or reputational harm, competitive harm, or legal liability. Failure to address AI ethics issues by us or others in our industry could undermine public confidence in our use of AI.

Previous wording

We have incorporated, and are continuing to develop and deploy, AI in our products and the operations of our business. Our use of AI in aspects of our Platform may present risks and challenges that could increase as AI solutions become more prevalent. The Roblox Cloud may be more relied upon in the future to facilitate increasingly complex decision-making as it integrates hardware and accelerated machine learning and other AI, for a broad range of compute tasks, including improved personalization, synthetic content generation, enhanced automation of the player experience, and AI systems deployed through our Platform. However, AI algorithms may be flawed and datasets may be insufficient or contain biased information. Even with safeguards in place and oversight, AI systems may make decisions unpredictably or autonomously, such as generating incorrect, offensive, and/or infringing content and may take actions beyond their intended scope. This can raise new or exacerbate existing ethical, technological, legal, and other challenges, and may negatively affect the performance or the perception of our Platform and the user and creator experience. Certain users have and may in the future attempt to manipulate AI systems to create violative content on our Platform. In addition, threat actors have used and in the future may use AI to enhance the effectiveness of their attacks against our Platform which may cause the loss of availability of the Platform, degradation in services, or compromises to user or company data. Our employees or contractors, or AI agents themselves, may also make errors using AI in the operation of our business which could result in proprietary or other confidential information being exposed externally and other negative outcomes. While we have and will continue to implement safeguards, these deficiencies and potential failures of AI systems due to their nature as increasingly complex technology or the use of AI by threat actors to enhance their attacks, could subject us to increased security risk, competitive harm, regulatory action, legal liability, and reputational harm, especially as the regulatory landscape around AI continues to rapidly develop.

Current wording

We have incorporated, and are continuing to develop and deploy, AI in our products and the operations of our business. Our use of AI in aspects of our Platform may present risks and challenges that could increase as AI solutions become more prevalent. The Roblox Cloud may be more relied upon in the future to facilitate increasingly complex decision-making as it integrates hardware and accelerated machine learning and other AI, for a broad range of compute tasks, including improved personalization, synthetic content generation, enhanced automation of the player experience, and AI systems deployed through our Platform. However, AI algorithms may be flawed and datasets may be insufficient or contain biased information. Even with safeguards in place and oversight, AI systems may make decisions unpredictably or autonomously, such as by generating incorrect, offensive, and/or infringing content and may take actions beyond their intended scope. This can raise new or exacerbate existing ethical, technological, legal, and other challenges, and may negatively affect the performance or the perception of our Platform and the user and creator experience. Certain users have and may in the future attempt to manipulate AI systems to create violative content on our Platform. In addition, threat actors have used and in the future may use AI to enhance the effectiveness of their attacks against our Platform which may cause the loss of availability of the Platform, degradation in services, or compromises to user or company data. Our employees or contractors, or AI agents themselves, may also make errors using AI in the operation of our business which could result in proprietary or other confidential information being exposed externally and other negative outcomes. While we have and will continue to implement safeguards, these deficiencies and potential failures of AI systems due to their nature as increasingly complex and autonomous technology, or the use of AI by threat actors to enhance their attacks, could subject us to increased security risk, competitive harm, regulatory action, legal liability, and reputational harm, especially as the regulatory landscape around AI continues to rapidly develop.

Previous wording

There are also many new and evolving laws and regulations focused on the use of AI, and agentic AI systems that operate with significant autonomy may face heightened scrutiny or additional regulatory requirements. For example, the EU’s Artificial Intelligence Act (“AI Act”) entered into force in August 2024. Certain of its obligations entered into effect in February 2025, and many of its applicable provisions are due to become effective by August 2026, although the EU’s legislature may vary the dates for certain obligations, and the European Commission has published the Digital Omnibus, a legislative package that proposes to, among other things, delay certain high-risk AI system deadlines with transparency obligations under the AI Act largely proceeding on the August 2026 schedule. EU institutions reached provisional agreement on the Digital Omnibus in May 2026, although it remains subject to formal adoption. The AI Act establishes a framework of prohibitions as well as disclosure, transparency, and other regulatory obligations based on various levels of risk for businesses introducing AI systems in the EU, and the Digital Omnibus proposes to expand the scope of prohibited AI practices under the AI Act. Provisions of the AI Act could require us to alter or restrict our use of AI both in features or products available to our users and in our systems that interact with our users, depending on respective levels of risk-categorization, types of systems, and manner of use, as set forth in the AI Act. The AI Act also may require us to comply with monitoring and reporting requirements. As a result, we may need to devote substantial time and resources to continue to evaluate our obligations under the AI Act and to develop and execute a plan designed to promote compliance. Noncompliance with the AI Act could result in fines of up to the greater of €35 million or 7% of annual global turnover for the previous year. There have been numerous other laws and bills proposed at the domestic and international level aimed at regulating the deployment or provision of AI systems and services. For instance, different states have proposed bills or enacted laws relating to aspects of the development and use of AI, including Texas, Colorado, and California. In addition, President Trump released an executive order in December 2025 seeking to establish national standards for AI that would supersede conflicting state laws.

Current wording

There are also many new and evolving laws and regulations focused on the use of AI, which require us to continually evaluate our obligations and design our systems with compliance in mind. For example, the EU’s Artificial Intelligence Act (“AI Act”) entered into force in August 2024. Certain of its obligations entered into effect in February 2025, and many of its applicable provisions became effective in August 2026. The European Commission adopted the Digital Omnibus on AI, a legislative package that, among other things, delays the application of certain high-risk AI system deadlines to December 2027 and August 2028, respectively. The AI Act establishes a framework of prohibitions as well as disclosure, transparency, and other regulatory obligations based on various levels of risk for businesses introducing AI systems in the EU, and the Digital Omnibus proposes to expand the scope of prohibited AI practices under the AI Act. Provisions of the AI Act require us to design or restrict our use of AI both in features or products available to our users and in our systems that interact with our users, depending on respective levels of risk-categorization, types of systems, and manner of use, as set forth in the AI Act. The AI Act also requires us to comply with monitoring and reporting requirements. As a result, we expect to devote substantial time and resources to continue to evaluate our obligations under the AI Act, develop our systems and tools, and execute plans designed to promote compliance. Noncompliance with the AI Act could result in fines of up to the greater of €35 million or 7% of annual global turnover for the previous year. There have been numerous other laws and bills proposed at the domestic and international level aimed at regulating the deployment or provision of AI systems and services. For instance, different states have proposed bills or enacted laws relating to aspects of the development and use of AI, including Texas, Colorado, and California. In addition, President Trump released an executive order in December 2025 seeking to establish national standards for AI that would supersede conflicting state laws.

Previous wording

Additionally, there are users who have multiple accounts, fake user accounts, or fraudulent accounts created by bots. These actions may be done to inflate user activity in order to make a creator’s game or other content appear more popular than it really is or to enable users to level up or otherwise progress in a game more rapidly. Detecting and taking action with respect to such issues requires considerable judgment and is technically challenging. We strive to detect and minimize fraud, the use of bots, and unauthorized use of our Platform, and while these practices are prohibited in our terms of service and we implement systems and measures to detect and suppress that behavior, when we are unsuccessful, our operating results may be negatively affected. Users may also disagree with our rationale for terminating, suspending, or taking other actions on accounts, which has and could continue to lead to reputational harm and further negatively impact our operating results.

Current wording

Additionally, there are users who have multiple accounts, fake user accounts, or fraudulent accounts created by bots. These actions may be done to inflate user activity in order to make a creator’s game or other content appear more popular than it really is or to enable users to level up or otherwise progress in a game more rapidly. Detecting and taking action with respect to such issues requires considerable judgment and is technically challenging. We strive to detect and minimize fraud, the use of bots, and unauthorized use of our Platform, and while these practices are prohibited in our terms of use and we implement systems and measures to detect and suppress that behavior, when we are unsuccessful, our operating results may be negatively affected. Users may also disagree with our rationale for terminating, suspending, or taking other actions on accounts, which has and could continue to lead to reputational harm and further negatively impact our operating results.

Previous wording

We rely on suppliers for data center capacity and several components of the equipment we use to operate our Platform. Our reliance on these suppliers exposes us to risks, including reduced control over costs and constraints based on the current availability, terms, and pricing of these components and data center capacity. While the network equipment and servers we purchase generally are commodity equipment and we believe an alternative supply source for network equipment and servers on substantially similar terms could be identified quickly, our business could be adversely affected until those efforts are completed. In addition, the technology equipment industry has experienced component shortages and delivery delays, and we have and may in the future experience shortages or delays, including as a result of increased demand in the industry, such as due to rapid growth in AI demand, data center natural disasters, trade control and restrictions, or our suppliers lacking sufficient rights to supply the components in all jurisdictions in which we have data centers and edge data centers that support our Platform. For example, supply chain constraints for servers, memory, and other networking equipment required for our operations have resulted and could in the future result in disruptions and delays for these components and the delivery and installation of such components at our data centers and edge data centers. If our supply of certain components is disrupted or delayed, there can be no assurance that additional supplies or components can serve as adequate replacements for the existing components or that supplies will be available on terms that are favorable to us, if at all. Any disruption or delay in the supply of hardware components or data center availability may delay the opening of new data centers, edge data centers, co-location facilities or the creation of fully redundant operations, limit capacity expansion, or replacement of defective or obsolete equipment at existing data centers and edge data centers or cause other constraints on our operations that could damage our ability to serve our creators and users.

Current wording

We rely on suppliers for data center capacity and certain components of the equipment we use to operate our Platform. Our reliance on these suppliers exposes us to risks, including reduced control over costs and constraints based on the current availability, terms, and pricing of these components and data center capacity. While the network equipment and servers we purchase generally are commodity equipment and we believe an alternative supply source for network equipment and servers on substantially similar terms could be identified quickly, our business could be adversely affected until those efforts are completed. In addition, the technology equipment industry has experienced component shortages and delivery delays, and we have and may in the future experience shortages or delays, including as a result of increased demand in the industry, such as due to rapid growth in AI demand, data center natural disasters, trade control and restrictions, or our suppliers lacking sufficient rights to supply the components in all jurisdictions in which we have data centers and edge data centers that support our Platform. For example, supply chain constraints for servers, memory, and other networking equipment required for our operations have resulted and could in the future result in disruptions and delays for these components and the delivery and installation of such components at our data centers and edge data centers. If our supply of certain components is disrupted or delayed, there can be no assurance that additional supplies or components can serve as adequate replacements for the existing components or that supplies will be available on terms that are favorable to us, if at all. Any disruption or delay in the supply of hardware components or data center availability may delay the opening of new data centers, edge data centers, co-location facilities or the creation of fully redundant operations, limit capacity expansion, or replacement of defective or obsolete equipment at existing data centers and edge data centers or cause other constraints on our operations that could damage our ability to serve our creators and users.

Previous wording

Robux and digital goods on our Platform have no authorized market, value, or application outside of our Platform. Creators that participate in our Developer Exchange Program can be paid fiat currency based on the amount of Robux they have accumulated, subject to eligibility. However, users have made and may in the future make unauthorized, fraudulent, or illegal sales, transfers, and/or purchases of Robux, other digital goods, and Roblox accounts on or off of our Platform, including by use of unauthorized third-party websites in exchange for fiat currency or to facilitate digital wagers. For example, some users have made fraudulent use of credit cards owned by others to purchase Robux and offer the purchased Robux for sale at a discount on third-party websites. For the three months ended June 30, 2026, total chargebacks and refunds to us, some of which may have been related to fraud, were approximately 1.7% of bookings.

Current wording

Robux and digital goods on our Platform have no authorized market, value, or application outside of our Platform. Creators that participate in our Developer Exchange Program can be paid fiat currency based on the amount of Robux they have accumulated, subject to eligibility. However, users have made and may in the future make unauthorized, fraudulent, or illegal sales, transfers, and/or purchases of Robux, other digital goods, and Roblox accounts on or off of our Platform, including by use of unauthorized third-party websites in exchange for fiat currency or to facilitate digital wagers. For example, some users have made fraudulent use of credit cards owned by others to purchase Robux and offer the purchased Robux for sale at a discount on third-party websites. For the three months ended September 30, 2026, total chargebacks and refunds to us, some of which may have been related to fraud, were approximately 2.1% of bookings.

Previous wording

While we regularly monitor and screen usage of our Platform with the aim of identifying and preventing these activities, and regularly monitor third-party websites for fraudulent Robux or digital goods offers as well as regularly send cease-and-desist letters to operators of these third-party websites, we are unable to control or stop all unauthorized, fraudulent, or illegal transactions in Robux or other digital goods that occur on or off of our Platform. Although we are not responsible for such third-party activities, our user experience may be adversely affected, and users and/or creators may choose to leave our Platform, if these activities are pervasive. These activities have resulted and may in the future result in negative publicity, disputes, regulatory scrutiny, and legal claims, and measures we take in response may be expensive, time consuming, and disruptive to our operations.

Current wording

While we regularly monitor and screen usage of our Platform with the aim of identifying and preventing fraudulent activities, and regularly monitor third-party websites for unauthorized Robux or digital goods offers as well as regularly send cease-and-desist letters to operators of these third-party websites, we are unable to control or stop all unauthorized, fraudulent, or illegal transactions in Robux or other digital goods that occur on or off of our Platform. Although we are not responsible for such third-party activities, our user experience may be adversely affected, and users and/or creators may choose to leave our Platform, if these activities are pervasive. These activities have resulted and may in the future result in negative publicity, disputes, regulatory scrutiny, and legal claims, and measures we take in response may be expensive, time consuming, and disruptive to our operations. Moreover, as we shift to Roblox Wallet in the future, our exposure to these risks may be increased and we will be required to update our systems and controls for preventing and minimizing unauthorized, fraudulent, and illegal payment activity on our Platform, which may be difficult to implement and restrict our operations. The new payment structure of Roblox Wallet may expose us to risks such as account takeovers, unauthorized use of payment credentials, and increased regulatory scrutiny, as well as other risks that are difficult to anticipate. Notwithstanding our efforts, there can be no assurance that our systems and controls will operate as intended or that we will be successful in preventing or mitigating such risks.

Previous wording

As we continue to expand our international operations, we become more exposed to the effects of fluctuations in currency exchange rates. We generally collect revenue from our international markets in the local currency. For the three months ended June 30, 2026, approximately 82% of our DAUs and 43% of our revenue was derived from outside the U.S. and Canada region. While we periodically adjust the price of Robux to account for the relative value of this local currency to the U.S. dollar, these adjustments are not immediate nor do they typically exactly track the underlying currency fluctuations. As a result, rapid appreciation of the U.S. dollar against these foreign currencies has harmed and may continue to harm our reported results and cause the revenue derived from our foreign users and overall revenue to decrease. In addition, even if we do adjust the cost of our Robux in foreign markets to fluctuations in the U.S. dollar, such fluctuations could change the costs of purchasing Robux to our users outside of the U.S., which may adversely affect our business, results of operations, and financial condition, or improve our financial performance.

Current wording

As we continue to expand our international operations, we become more exposed to the effects of fluctuations in currency exchange rates. We generally collect revenue from our international markets in the local currency. For the three months ended September 30, 2026, approximately 83% of our DAUs and 43% of our revenue was derived from outside the U.S. and Canada region. While we periodically adjust the price of Robux to account for the relative value of this local currency to the U.S. dollar, these adjustments are not immediate nor do they typically exactly track the underlying currency fluctuations. As a result, rapid appreciation of the U.S. dollar against these foreign currencies has harmed and may continue to harm our reported results and cause the revenue derived from our foreign users and overall revenue to decrease. In addition, even if we do adjust the cost of our Robux in foreign markets to fluctuations in the U.S. dollar, such fluctuations could change the costs of purchasing Robux to our users outside of the U.S., which may adversely affect our business, results of operations, and financial condition, or improve our financial performance.

Previous wording

In addition to market and regulatory factors, any future success of the China JV will require a collaborative effort with Tencent to build and operate Luobu and Luobulesi as together, they will form the exclusive basis for growing our penetration in the China market. In addition, upon the occurrence of certain events, such as a termination of certain of the contractual relationships applicable to Luobu, a change of control of us, or the acquisition of 20% of our outstanding securities by certain specified Chinese industry participants, we may be required to purchase Songhua’s interest in the China JV at a fair market value determined at the time of such purchase. Any future requirement to purchase the interest in China JV from Songhua may have a material adverse effect upon our liquidity, financial condition, and results of operations both as a result of the purchase of such interests and the fact that we would need to identify and partner with an alternative Chinese partner in order for operations to continue in the China market.

Current wording

In addition to market and regulatory factors, any future success of the China JV will require a collaborative effort with Tencent to build and operate Luobu and Luobulesi as together, they will form the exclusive basis for growing our penetration in the China market. In addition, upon the occurrence of certain events, such as a termination of certain of the contractual relationships applicable to Luobu, a change of control of us, or the acquisition of 20% of our outstanding securities by certain specified Chinese industry participants, we may be required to purchase Songhua’s interest in the China JV at a fair market value determined at the time of such purchase. Any future requirement to purchase the interest in the China JV from Songhua may have a material adverse effect upon our liquidity, financial condition, and results of operations both as a result of the purchase of such interests and the fact that we would need to identify and partner with an alternative Chinese partner in order for operations to continue in the China market.

Previous wording

In May 2026, our board of directors authorized the repurchase of up to $3.0 billion of our Class A common stock from time to time through a share repurchase program. Under our program, we may make repurchases of stock from time to time through open market transactions, privately negotiated transactions, and other means in compliance with applicable securities laws, including through Rule 10b5-1 plans. As of June 30, 2026, $2.6 billion remained available for purchase under the program. Our program does not have a fixed expiration date, does not obligate us to repurchase any specific number of shares, and may be suspended or discontinued at any time at our discretion and without prior notice. The timing, manner, price, and amount of any repurchases, if any, will be determined by us at our discretion and will depend on a variety of factors, including legal requirements, price, and economic market conditions. Any failure to repurchase stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price.

Current wording

In May 2026, our Board of Directors authorized the repurchase of up to $3.0 billion of our Class A common stock from time to time through a share repurchase program. Under our program, we may make repurchases of stock from time to time through open market transactions, privately negotiated transactions, and other means in compliance with applicable securities laws, including through Rule 10b5-1 plans. As of September 30, 2026, $2.4 billion remained available for purchase under the program. Our program does not have a fixed expiration date, does not obligate us to repurchase any specific number of shares, and may be suspended or discontinued at any time at our discretion and without prior notice. The timing, manner, price, and amount of any repurchases, if any, will be determined by us at our discretion and will depend on a variety of factors, including legal requirements, price, and economic market conditions. Any failure to repurchase stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price.

Previous wording

Certain privacy, biometric information, cybersecurity, and data protection laws and regulations have placed and will continue to place significant privacy, data protection, and cybersecurity obligations on organizations such as ours and may require us to continue to change our policies and procedures. For example, the EU’s General Data Protection Regulation (“GDPR”) imposes stringent data protection requirements regarding EU personal data, and EU regulators may impose fines of the greater of €20 million or 4% of annual global revenues of the previous year for the most serious breaches or instances of noncompliance. Such fines would be in addition to (i) the rights of individuals to sue for damages in respect of any data privacy breach that causes them to suffer harm, (ii) the right of individual member states to impose additional sanctions under local privacy laws over and above the administrative fines specified in the GDPR, and (iii) the ability of supervisory authorities to impose orders requiring companies to modify their practices. Further, the EU’s Data Act (the “Data Act”) became applicable in September 2025. Compliance with the Data Act may require us to adjust contract terms with business partners and enable data sharing in some situations. These changes may result in additional compliance and operational costs, which may affect our business.

Current wording

Certain privacy, biometric information, cybersecurity, and data protection laws and regulations have placed and will continue to place significant privacy, data protection, and cybersecurity obligations on organizations such as ours and may require us to continue to change our policies and procedures. For example, the EU’s General Data Protection Regulation (“GDPR”) imposes stringent data protection requirements regarding EU personal data, and EU regulators may impose fines of up to the greater of €20 million or 4% of total global turnover for the most serious breaches or instances of noncompliance. Such fines would be in addition to (i) the rights of individuals to sue for damages in respect of any data privacy breach that causes them to suffer harm, (ii) the right of individual member states to impose additional sanctions under local privacy laws over and above the administrative fines specified in the GDPR, and (iii) the ability of supervisory authorities to impose orders requiring companies to modify their practices. Further, the EU’s Data Act (the “Data Act”) became applicable in September 2025. Compliance with the Data Act may require us to adjust contract terms with business partners and enable data sharing in some situations. These changes may result in additional compliance and operational costs, which may affect our business.

Previous wording

Because a large number of our DAUs are historically under 13, we face significant risks under the Children’s Online Privacy Protection Act (“COPPA”), Article 8 of the GDPR, and similar regulations. COPPA imposes requirements on operators of websites or online services directed to children under 13 years of age to obtain verifiable parental consent before collecting personal information from children under the age of 13, unless specific exceptions apply, and imposes data retention and information security obligations. No assurances can be given that our compliance efforts will be sufficient to avoid allegations of COPPA violations, and any non-compliance or allegations of non-compliance could expose us to significant liability, penalties and loss of revenue, significantly harm our reputation, and could be costly and time consuming to address or defend. To the extent we rely on consent for processing personal data under the GDPR, consent or authorization from the holder of parental responsibility is required in certain cases for the processing of personal data of children under the age of 16, and member states may enact laws that lower that age to 13. Additionally, in certain jurisdictions the law may allow minors to disaffirm their contracts, including our terms of use. If minors on our Platform are able to avoid enforcement of our terms of use under applicable law, it could have a material adverse impact on our business, financial condition, results of operations, and cash flow.

Current wording

Because a large number of our DAUs are historically under 13, we face significant risks under the Children’s Online Privacy Protection Act (“COPPA”), Article 8 of the GDPR, and similar regulations. COPPA imposes requirements on operators of websites or online services directed to children under 13 years of age to obtain verifiable parental consent before collecting personal information from children under the age of 13, unless specific exceptions apply, and imposes data retention and information security obligations. As mentioned above, the FTC and certain states are currently investigating our compliance with COPPA and may consider filing claims based on alleged violations of COPPA and other matters. No assurances can be given that our compliance efforts will be sufficient to avoid liability for alleged COPPA violations, and any noncompliance or allegations of noncompliance could expose us to significant liability, penalties, and loss of revenue, significantly harm our reputation, and could be costly and time consuming to address or defend, which could materially adversely affect our business, including our financial condition, operating results, and reputation. To the extent we rely on consent for processing personal data under the GDPR, consent or authorization from the holder of parental responsibility is required in certain cases for the processing of personal data of children under the age of 16, and member states may enact laws that lower that age to 13. Additionally, in certain jurisdictions the law may allow minors to disaffirm their contracts, including our terms of use. If minors on our Platform are able to avoid enforcement of our terms of use under applicable law, it could have a material adverse impact on our business, financial condition, results of operations, and cash flow.

Showing the first 40 of 66 pairs. Open the source sections for the rest.