Privacy Policy

This policy explains what Nepbyte Bazaar collects about you, why, who else sees it, how long we keep it, and what you can do about it. It applies to our website and app.

• To deliver your orders and send them to the right player ID or account
• To check that payments arrived, and to find fake screenshots
• To run your account: wallet, rewards, coupons, order history and invoices
• To tell you about your orders, by notification and email, and to answer your questions
• To verify age and identity before larger orders
• To stop fraud and abuse, and keep the site secure
• To see which pages work and which confuse people, so we can improve them
• To send offers, but only if you subscribe, and you can unsubscribe any time

We never sell your information.

If you verify your identity (needed for orders above Rs. 2,000):

• We use your ID only to confirm who you are and that you are 18 or older. Never for marketing, never shared with other customers.
• Your photos are made smaller and stripped of the hidden data phones add (like where a photo was taken) before they are stored.
• They are kept in a private place on our server that cannot be opened from the web. Only our admins see them, and every look is recorded in our audit log.
• An AI reads the photos once, to compare the ID with what you typed (see How we use AI).
• The photos are deleted when no longer needed: we keep them only while they may help settle a dispute or stop fraud, and delete them straight away when you send new ones. We keep the result (verified or not), the kind of ID, your name, date of birth and ID number, so we can show you are verified and stop one ID being used on many accounts.

We use AI services from other companies (like Google's Gemini) for three jobs:

• The chat assistant answers your questions first. It sees your messages and your recent orders, so it can help with them.
• Payment checks: it reads your payment screenshot to see whether the amount, account and time match your order.
• ID verification: it reads your ID photos and selfie to compare them with what you typed.

The AI helps our team; it does not decide on its own. A person decides refunds and problems, and on every ID verification. We send these services only what each job needs, through their business services.

Only who needs to, to run the service:

• Game and top-up suppliers: the player ID (and zone) to deliver to. A login, only for the products that need one.
• Payment providers (eSewa, Khalti, banks): they handle your payment under their own privacy policies.
• AI services: as explained in How we use AI.
• Services that run the site: our web host, email delivery, Google Firebase (phone notifications), Pusher (live updates on the page), Telegram (order alerts to our team), and Microsoft Clarity, which records how pages are used so we can fix confusing ones. When you are signed in, Clarity shows our team your username, to help with the problems you report.
• The law: when Nepali law or the police require it, or to protect customers from fraud.

Other customers see only your username, picture and reviews, and your username when you send them money.

• Sign-in: keeps you signed in while you browse, and for up to 30 days if you choose "Remember me".
• Visits: a random number that tells one visitor from another, and which products you looked at recently.
• Analytics: Microsoft Clarity's cookies, to understand how the site is used.

Blocking cookies in your browser will sign you out and stop some parts of the site from working.

• Everything travels encrypted (HTTPS).
• Passwords are stored as one-way hashes. Game logins are encrypted (AES-256).
• ID photos, keys and backups are kept where the web cannot reach them.
• Each team member sees only what their role needs, and what admins do is recorded.

No system is perfectly safe. If a breach ever puts your information at risk, we will tell you.

• See and change your details any time in Settings.
• Get a copy of what we hold about you: write to us.
• Delete your account in Settings › Danger zone. Your profile, login details and ID photos go. Records the business must keep, like past orders and payments, stay without being shown to anyone.
• Notifications: switch them off in your phone or browser settings.
• Offers by email: unsubscribe from the link in any email.

Nepbyte Bazaar is for people 13 or older. If you are under 18, use it with a parent's or guardian's permission. Larger orders need you to be 18 or older and verified. If you think a child under 13 has an account, tell us and we will delete it.

When we change this policy, the date at the top changes too, and we announce big changes on the site before they start.

Questions, a copy of your data, or a worry about privacy: