I have tried to ask for a refund from being hacked. And the respond from the GM is "poor account security" and no refund at this time. https://royals.ms/forum/threads/hacked.69335/#post-365961 Why in this case: https://royals.ms/forum/threads/losangeles-hacked.23259/ the player was refunded? How do you consider "poor account security"?
Using same ID/password for both forums/game. Re-using ID/password from other private servers (this is probably the most common one). Making it too easy (e.g. having information on your profile that could easily lead someone to finding out your password)...
The ones who have been hacked recently used the same information elsewhere as they do here, which is really poor account security. Things change, if you look back far enough you can see hackers being given second chances, does that mean everyone should get that, of course not. It's not possible to have admins be responsible for your account information if you use it elsewhere or use a ridiculously easy password.
Chance was refunded because, at the time, nobody knew people were using info from other server databases to try and get into people's accounts on other servers. It's been a little over a year since then and server owners everywhere have been encouraging players to change their passwords or use different info when signing up.