1. Scope
This Privacy Policy explains how NextStops processes personal data when you visit the website, create an account, verify a mobile number, fund a wallet, check a game account, place an order, or contact Support.
2. Data we collect
- Account data: name, email address, verified mobile number, and a securely hashed password.
- Verification data: OTP request status, expiry, attempt limits, IP address, and verification time. We do not retain the plain OTP after verification.
- Game data: Player ID or UID, Zone ID, in-game name, account region, selected game, and package.
- Order data: invoices, provider references, transaction status, wallet entries, promotional codes, support messages, and fulfilment errors.
- Payment data: amount, payment method, UPI payment reference, QR-payment status, and gateway response. NextStops does not request or store your UPI PIN.
- Technical data: IP address, session and security cookies, browser information, timestamps, logs, and device-related request data.
3. How we use data
We use personal data to create and secure accounts, send OTPs, validate game accounts and regions, process payments and wallet entries, fulfil recharge orders, enforce regional and promotional restrictions, prevent fraud, provide support, maintain records, improve reliability, and meet legal obligations.
4. How we share data
We share only what is reasonably needed with recharge providers such as Smile.One and MooGold; payment and UPI service providers; the OTP delivery provider; hosting, database, security, and communications vendors; professional advisers; and authorities where disclosure is legally required. A recharge provider may receive the Player ID, Zone ID, in-game name, region, and selected package.
Providers process data under their own terms and privacy practices. Data may be processed outside your state or country where a provider or infrastructure service operates, subject to applicable legal requirements.
5. Cookies and sessions
NextStops uses necessary cookies and local browser storage for login sessions, CSRF protection, preferences, navigation, and payment state. Disabling necessary cookies can prevent account and checkout functions from working.
6. Retention and security
We retain data for as long as needed to provide the service, resolve disputes, detect fraud, keep financial and transaction records, and meet legal requirements. Retention periods differ by record type. We use access controls, hashed passwords, encrypted transport, private provider-session storage, rate limits, and audit or application logs. No system can guarantee absolute security.
7. Your choices and rights
Subject to applicable law, you may request access to or correction of your personal data, withdraw consent where processing relies on consent, request erasure where retention is no longer required, and raise a grievance. Some order, payment, fraud-prevention, and legal records must be retained even after an account request.
To make a privacy request, sign in and open a Support ticket. We may verify your identity before acting on a request.
8. Children
NextStops is intended for adults. We do not knowingly permit a child to create and operate an account independently. A parent or lawful guardian should contact Support if a child's personal data was submitted without appropriate authority.
9. Updates
We may update this Policy to reflect service, provider, security, or legal changes. The effective date at the top identifies the current version.