Legal
Privacy policy
Last updated 15 October 2026.
MaxWin Society is based in New Zealand and follows the Privacy Act 2020. This explains what we collect, why, and your choices.
What we collect
- Account: email, username, display name, password (stored only as a secure hash), country, and optional bio, photos and social links.
- Kick or Discord sign-in: if you use it, that service tells us your account ID, name and (if you share it) your email. We never see your Kick or Discord password, and you can disconnect at any time.
- Launch list: if you joined before launch, your email and country. We use it once to tell you we’ve launched, then don’t email you from it again.
- Activity: events you join or save, max-win submissions and evidence, rewards, follows, clips, support tickets and reports.
- Shipping: name, address, country and (optionally) phone when you claim a reward.
- Live chat: your messages, and the name and email you give so we can reply.
- Technical: login sessions (browser and device type), and a one-way hash of visitor details to count referral clicks without storing your IP address.
- Site statistics: which pages are viewed, the referring site, device type and country (from Cloudflare), counted with an anonymous ID that changes every day. No advertising or cross-site tracking.
Pages we set up from public information
Some studio and streamer pages were created from information those studios and streamers publish themselves: names, logos and profile pictures, banners, public bios, social links and links to public clips. Each is marked “Unclaimed” until its owner claims it. Owners can edit or remove anything, and anyone can ask us to remove a page about them.
ClipRally
ClipRally, our sponsor, can send us details of clips made on its site: the clip link and title, the stream it came from, the clipper’s ClipRally username, and the game, studio and win size. We show these on the matching studio and streamer pages. We don’t send ClipRally your personal information.
How it's used and shared
- Your public profile shows only what you add to it. Approved wins appear publicly unless you untick “show publicly”.
- Submissions and screenshots are seen only by the event's provider team and our moderators.
- Shipping details are shared only with whoever ships your parcel (the provider team) and our admins.
- We don't sell your data and we don't run advertising trackers.
- Services that help run the site and only use data to do that job: Cloudflare (hosting network, security and bot checks), our email provider (account emails), and Kick or Discord if you sign in with them.
Your choices
- Download everything we hold from Account → Security & privacy.
- Choose which notifications and emails you get in notification settings.
- Delete your account any time in Settings. We keep a minimal record of approved wins and shipped rewards where needed for audit and fraud prevention.
If you live outside New Zealand
Members around the world use MaxWin Society. Wherever you are, you can access, correct, download or delete your information, and object to how we use it. If you're in the EU, EEA or UK, we process your data to provide the service you signed up for (contract), to keep the platform safe (legitimate interests) and where the law requires; your information is stored in New Zealand, which the EU recognises as providing adequate protection. You can also complain to your local data-protection authority. We use essential cookies (login, security, your chat, your 18+ confirmation). Analytics cookies are only set if you allow them — see below.
Analytics (optional)
If you choose “Allow” on the analytics banner, we use Google Analytics to see which pages are visited, roughly where visitors come from and what device they use. It sets cookies (named _ga) and Google processes this data for us. We don't use it for advertising, and we only add it to public pages — never to your dashboard or pages with private links. Until you choose, Google Analytics runs in “consent mode” — no cookies and no identifiers, only anonymous counts that Google uses to estimate visitor numbers. If you choose “No thanks”, it stops completely and any analytics cookies are removed.
Security
Passwords are hashed, sessions are secure cookies, two-factor login is available, and evidence files are private. If we ever have a privacy breach likely to cause serious harm, we'll notify you and the Privacy Commissioner.
Contact
Privacy questions or requests to correct your information: hello@maxwinsociety.com.