Privacy Policy

Effective 30 October 2026

NextGOAL ("we") is a football match-reading tool for live and pre-match decisions. It is not a betting platform. This policy explains what data we collect about you, what we use it for, who receives it, and how you can manage your own data.

This policy covers the website www.nextgoal.io, the Telegram bot @nextgoal_chatbot, the LINE Official Account @884qzagj, and NextGOAL's Facebook pages that link to the website.

Data controller: World Group Management Limited · Euro House, Richmond Hill Road, Kingstown, St. Vincent and the Grenadines · Contact: socialmedia@nextgoal.io

1. What we collect

1.1 When you create an account or sign in

Email and password — your password is stored with one-way encryption. Nobody on our team can see it.
Google — your Google account ID, email, name and profile picture
Telegram — your Telegram user ID, name (your Telegram username if you have no name set) and profile picture. We do not receive your phone number or email.
LINE — your LINE user ID, name and profile picture. We do not request your email from LINE.
Things you set yourself: display name, supported teams (up to 5), language
When your account was created and when you last signed in

1.2 When you use the service

Matches you star (removed automatically 48 hours after kick-off)
Prediction game: your calls, settled results and points (points are a game score with no value and cannot be exchanged for anything) · friend challenges
Chat: messages, emoji reactions, poll votes and message reports
When you post in chat, we record the country your network indicates (country level only) to show a flag next to your name

1.3 When you turn on alerts

Browser notifications (Web Push) — the delivery address your browser creates, your settings (threshold, leagues, followed matches) and language. This is not linked to your account.
Telegram — your chat ID, your Telegram app language, your alert settings, the link that brought you to the bot and who invited you (if you came from an invite link)
LINE — your LINE user ID, the language from your LINE profile, your alert settings, and a record of which alerts were sent

1.4 When you ask the AI assistant in our Telegram bot

The text of your question is sent to an AI provider (section 4) to write the answer. We do not send your name or chat ID with it.
We store questions and answers so repeated questions are answered faster, and count daily usage to apply limits. This data currently has no automatic deletion; you can ask us to delete it at socialmedia@nextgoal.io.
Messages sent to our LINE account are not sent to any AI provider.

1.5 How you arrived

If you arrive from an ad or a post tagged with a source label (UTM), we remember the first label for 90 days and save it to your account if you sign up during that time, so we can tell which channels work.

1.6 What we do not collect

We do not store your IP address in our database. (Our hosting provider and the content providers in section 4 process IP addresses as a normal part of delivering pages and files to you.)
We do not store card or bank details. The service has no payments.
The "people online now" counter uses a random per-tab ID that does not identify you, and keeps only per-minute totals.

2. Cookies and browser storage

Our cookies

Name	Purpose	Lifetime
ng_session	Keeps you signed in	60 days
ng_oauth	Used during Google or LINE sign-in for security	10 minutes
ng_lang	Remembers the language you chose	1 year
ng_utm	Remembers where you first came from (section 1.5)	90 days
ng_signup	Sends a one-time "sign-up completed" signal to our measurement tools, then is deleted	Up to 10 minutes

Third-party cookies

Google Analytics 4 (_ga and related cookies) — counts page views, sign-ups and alert opt-ins (only the type of channel is sent, never your email or account ID)
Meta Pixel (_fbp and related cookies) — measures Facebook and Instagram ads: page views, opening a match page (the match ID), sign-ups, alert opt-ins, predictions and team choices. We do not send your email, name or phone number to Meta.

Both tools currently run as soon as you open the website. You can turn them off with your browser's privacy settings or a tracker-blocking extension; the website keeps working normally.

Browser storage

We keep settings on your device (localStorage and sessionStorage), such as league filters, sort order, alert settings, matches starred before signing in, and page data remembered so pages open faster. You can remove it by clearing this site's data in your browser.

3. How we use data

To provide what you ask for: your account, sign-in, alerts, the prediction game, chat and the bot assistant — to perform our terms of service
To keep the service safe and prevent misuse, such as rate limits and reviewing reported messages — legitimate interest
To measure usage and the results of marketing channels so we can improve the service — legitimate interest
We do not sell your personal data.

5. How long we keep data

Your account — until you delete it
Sign-ins — 60 days each
Starred matches — 48 hours after kick-off
Alerts — until you turn them off (Telegram: send /stop · LINE: unfollow or send "ปิด" · browser: turn notifications off), or until your browser cancels the delivery address itself
Questions to the AI assistant and usage counts — no automatic deletion yet; you can ask us to delete them at socialmedia@nextgoal.io

When you delete your account

Deleted immediately: your email, password, display name, supported teams, language, linked Google, Telegram and LINE logins, all sign-ins, and your Telegram alert subscription
Kept in our system but not shown to others: the profile picture link from your sign-in provider, your source information (section 1.5), and when your account was created and last signed in
Your prediction history and chat messages remain, but are no longer linked to your name (they are shown under a generic name). Your past chat messages still show a country flag. This keeps other people's rankings and conversations intact.
LINE and browser alerts are not linked to your account and must be turned off separately as described above.
To have the remaining data deleted as well, email socialmedia@nextgoal.io.

6. Your rights

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), you have the right to:

Access your data and get a copy
Correct inaccurate data
Have your data deleted, or its use restricted
Object to processing, and withdraw any consent you gave
Receive your data in a machine-readable format
Complain to Thailand's Personal Data Protection Committee (PDPC)

Things you can do right away

Delete your account — Profile → Delete account
Unlink Google, Telegram or LINE — Profile page
Change your display name, teams and language — Profile page
Turn off alerts — see section 5

For anything else, email socialmedia@nextgoal.io. We will reply within 30 days.

7. Security

All data is sent over HTTPS
Passwords are stored with one-way encryption (PBKDF2)
Sign-in tokens are stored as hashes, never in plain form
Access to data is limited to the administrators who need it

No system is completely secure. If a data breach puts you at risk, we will notify the authorities and the people affected as the law requires.

8. Minors

This service is for people aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has given us data, contact socialmedia@nextgoal.io and we will delete it.

9. Changes to this policy

If we change this policy, we will update the effective date above, and announce important changes on the website.

10. Contact us

World Group Management Limited · Euro House, Richmond Hill Road, Kingstown, St. Vincent and the Grenadines · socialmedia@nextgoal.io