Cloudflare Expert To Help With Changing Setup

I have a radio and TV station live streaming site. The site is built in a WordPress theme that was modified. The site also supplies the data for a sister Roku app that we have. JSONs in the website files are made available to the Roku app. We were recently getting bots hitting the site so much that it would take the site down. So we added Cloudflare. That has mostly worked. But occasionally we're still getting a bot hit that is taking the site down. The second thing is the Roku app is loading on Roku but doesn't seem to be able to access the JSON files because Cloudflare is getting in the way. Here's what I'm thinking: 1. Since the streaming is only Latin American feeds, I can block anything coming to the site from China, Singapore, etc., where the bots seem to be coming from. 2. Build a rule to allow the Roku app access to the JSON files. 3. Suggest anything else I can do to more effectively use Cloudflare or any other system. Note: This is not a moneymaking project for me right now. So I'm trying to keep costs down. The Cloudflare account is a free account. I would prefer it stay that way if possible until I can develop the business more. Please give me an idea of your experience with this kind of project when you apply. Thanks very much.