Privacy Policy

1. About This Policy

This policy explains how the MoonsRewards service (“MoonsRewards,” “we,” or “us”) handles information when you visit the website, sign in, connect an account, claim a reward, enter a contest, use loyalty points, or redeem a shop item. It also explains the information visible to other people and the choices available to you. Our Terms of Service describe how these features work.

2. Information You Provide

Account and profile details: your username, email when supplied, avatar, biography, country if provided, and notification settings. Accounts created solely through Kick may have no email address. If you set a MoonsRewards password, a hash is stored rather than the readable password. Two-factor setup uses an authentication secret and recovery-code records.
Reward and payout details: your Stake username and approval history, reward claims, rank or deposit details, weekly bonus amounts, claim instructions and notes, and optional Bitcoin, Ethereum, or USDT payout addresses.
Proof files: screenshots or other files submitted with a bonus claim, together with their filenames, types, sizes, upload times, and malware-check results. Files can contain account balances or other information visible in the original image. Redact unrelated personal details and submit only the proof needed for the claim.
Participation and orders: balance guesses, raffle prize-claim details, referral associations, shop items and points prices, buyer instructions, delivery notes, order status, and support messages you choose to send.

Do not send provider passwords, private keys, wallet seed phrases, or recovery codes in claims, order notes, or support conversations. Information is required where it is needed to sign you in, establish reward eligibility, or deliver the item you requested; without it, the relevant feature may be unavailable. Optional profile fields can be left blank.

3. Information From Connected Services

Discord: sign-in provides your Discord account ID, username, email, and available profile or avatar information. Discord does not give us your Discord password.
Kick: when you sign in or connect Kick, we receive the verified Kick account ID and username and record the connection and age-confirmation time. Kick does not give us your Kick password. Connection history is retained when an account is disconnected.
Stake-related affiliate records: leaderboards and raffles use supplied usernames, eligible counted wagering, periods, rankings, and reward information from affiliate feeds or imports. These records can exist before the player links a MoonsRewards account.
GAMB8 loyalty service: when live loyalty features are enabled, we request records for your connected Kick account, including point balances, pending points, earned and spent totals, point transactions, rank, and account restrictions. Where enabled and supplied by the program, we also receive stream attendance, streaks, and engagement summaries such as message counts. We receive transaction updates needed to confirm point spending, holds, and refunds.
Calculator inputs: calculators powered by GAMB8 send the figures and settings you enter, such as wager amounts and selected ranks or games, to its public calculator service to obtain estimates. These requests do not attach your MoonsRewards sign-in token.

4. Technical and Activity Information

Operating the website creates request and security records, including IP addresses, browser or device information, request times, authentication events, and errors. We record relevant account activity, last sign-in or activity times, reward decisions, notification delivery and read status, and order events. Security checks may use a derived identifier based on IP and browser information to recognize a new device; approximate location may be derived from an IP address where that capability is available.

Participation records include counted wagers, rankings, ticket allocations, contest results, reward balances, experience or level information, and referrals. Administrative review records can include the reason a claim or account was flagged and staff actions taken to resolve it. These records support the service and aggregate operational statistics; they are not a complete record of your activity on a gambling provider’s website.

5. Why We Use Information

We use the information described above to:

Sign you in, maintain your account, and connect the correct provider identities.
Calculate and review eligibility, rankings, tickets, contest results, and reward claims.
Display loyalty records, confirm points charges or refunds, and deliver shop rewards.
Send account, security, claim, and order updates and respond to support requests.
Respect notification choices and send promotional notices where permitted.
Investigate duplicate claims, detect abuse or malware, correct errors, and secure the service.
Understand service activity, maintain reliable operation, and meet legal obligations.

Where a lawful basis is required, the basis depends on the purpose: performing the service you request for account, reward, and order handling; legitimate interests in security, fraud prevention, support, and service operation, subject to your rights; compliance with applicable legal obligations; or consent for optional processing where consent is required. Using this website or reading this policy does not itself give consent to every kind of processing.

Eligibility checks, ticket calculations, contest rankings, and points restrictions can affect whether you receive a reward. Bonus claims also undergo staff review. If a result or restriction seems wrong, contact MoonsRewards to request a review and identify the affected claim, draw, or order.

MoonsRewards does not sell or rent your personal information for marketing. We disclose information as needed for the following service functions:

Account connections: Discord and Kick handle their sign-in screens and the information exchanged to authenticate or connect your account.
Calculators: GAMB8 receives the calculation inputs sent from your browser and the technical information associated with that request, including your IP address.
Loyalty and fulfilment: GAMB8’s live loyalty service receives the Kick account identifier, points amount, and transaction or order references needed to process points charges, holds, or refunds. Staff and a relevant reward provider may need your recipient username or payout details to arrange delivery, including a Stake tip where used.
Infrastructure and communication: hosting, database, storage, network, and email providers process the data needed to run the service. Claim attachments are stored in private object storage or protected server storage. Account emails, where sent, use your account email address. Support through Discord is also subject to Discord’s practices.
File safety: the production configuration uses private malware scanning. A separately configured VirusTotal fallback can send a file’s hash and, if no report exists, its contents and filename to VirusTotal. Standard VirusTotal submissions may be accessible to its security partners and qualified customers. This external disclosure applies only if that fallback is enabled; it is not the private production scanner.
Legal and security matters: information may be disclosed where law requires it or where reasonably necessary to investigate abuse, protect affected people, resolve disputes, or establish or defend legal claims, subject to applicable protections.

Third-party links, images, fonts, or media can cause your browser to contact the relevant provider and disclose technical information such as your IP address. Visiting linked casino, video, or streaming websites is subject to their own policies. See Discord’s privacy policy, Kick’s privacy policy, Google’s privacy policy, GAMB8’s privacy policy, and VirusTotal’s sharing explanation.

7. Information Other People Can See

Public leaderboards, draw results and verification information, contest results, and recent activity can show participant display identities, avatars where used, ranks, counted wagers, ticket totals, guesses after reveal, and prizes. Some views mask usernames; masking a name should not be treated as a guarantee that participation cannot be linked to you. Referral views can show a referrer the referred account’s username, join date, and wagered total.

Login emails, payout addresses, claim proof files, and private order notes are not intended as public content. Authorized staff can access information needed for review, security, support, or fulfilment. Any information you post in a public Discord channel is visible under that channel’s settings. Choose a display name and avatar that do not reveal private details if you want to keep those details separate from public participation.

8. Cookies and Browser Storage

Sign-in and security use cookies, including access and refresh session cookies, CSRF protection, and temporary provider sign-in state. Access cookies last up to 15 minutes and refresh cookies up to three days when issued; continued sign-in can renew them. A saved website-design choice can last up to a year. Restricted previews may also use temporary access cookies.

Local and session storage remember display preferences, sidebar state, page choices, dismissed messages, temporary return paths after sign-in, and cached moon-phase information. Session storage is temporary to the browser session; local preferences can remain until replaced or cleared. These uses support sign-in, security, and website functionality.

You can clear or block storage through your browser settings. Blocking required sign-in or security cookies can prevent account features from working. A browser accepting cookies or your continued website use is not blanket consent to optional tracking. If optional processing requires consent under applicable law, a separate choice is required.

9. Security

Safeguards include HTTPS in production, password hashing for local passwords, protected session cookies, access controls, two-factor authentication with encrypted authentication secrets, and security logs. Claim files are access-controlled and checked for malware; cloud file access uses time-limited links. Authentication tokens are signed to detect tampering; signing does not mean every stored record is encrypted. No internet service can guarantee absolute security. Keep credentials and private file links confidential.

10. Retention, Disconnection, and Deletion

Account and profile records support your ongoing account. Claims and proof files, reward history, orders, point transaction references, support records, and security logs may need to be kept to complete delivery or refunds, prevent repeat claims and fraud, investigate problems, resolve disputes, and meet applicable recordkeeping duties. Retention depends on these purposes, any outstanding matter, and applicable legal requirements. There is no single automatic deletion period covering every category of data.

Disconnecting Kick or another provider is not an account-deletion request. Historical Kick connections are retained, and shop orders retain recipient usernames, Kick identifiers, instructions, and transaction references separately from the account link. Deleting a user account alone does not automatically erase those order records, uploaded files, archives, backups, or records held independently by a connected provider.

To request deletion or a copy of your information, contact MoonsRewards using the route below. These requests require review; a complete self-service export or account-erasure tool is not currently available. We may need to verify account ownership. Where required by applicable law, we will delete or anonymize information that does not need to be retained and explain any permitted retention or other limit on your request. A request about a separate provider’s own records may also need to be sent to that provider.

11. Your Choices and Privacy Rights

Your profile lets you update supported account details and payout addresses. Available notification settings control promotional and other optional notices; essential security or service messages may still be sent. Kick connection controls let you disconnect Kick where doing so leaves a supported sign-in method.

Depending on the law that applies to you, you may have rights to access or obtain a copy of your data, correct it, request deletion, restrict processing, object to processing based on legitimate interests, or receive portable data. If processing relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal. You may also complain to the data-protection authority in your jurisdiction. Contact MoonsRewards to exercise a right or ask about an eligibility decision; the response will follow applicable requirements and time limits. You do not need to post your request or evidence in a public channel.

12. Age Restrictions and International Processing

The Platform is intended for people aged at least 18 who also meet any higher minimum age for the relevant activity where they live. If you believe an underage person has provided information, contact MoonsRewards so the account and information can be reviewed and handled as required by applicable law.

Our infrastructure and connected providers may process information in countries other than yours, with different privacy laws. Using the Platform is not blanket consent to an international transfer. Where applicable law requires a transfer safeguard, the relevant transfer must meet those requirements. Contact MoonsRewards to ask about processing locations and any safeguards applicable to your information.

13. Updates and Contacting MoonsRewards

Policy changes will carry a new revision date. We will bring material changes to your attention through the Platform or an available account contact method where required. Updating this notice does not, by itself, obtain consent for a new use that requires your consent.

Use the MoonsRewards Discord community to ask the moderation team how to reach MoonsRewards support privately. State that your request concerns privacy and identify your MoonsRewards account when speaking privately with the team. Discord is a third-party service. Do not post personal documents, payout details, proof files, passwords, or recovery codes in public channels. Ask the team for an appropriate private way to provide any information needed to verify your request.