星星耀联城POINTS TERMS

积分价值条款规则 · POINT VALUE TERMS & RULES

01PAGE 1 / 3

积分价值、外部消费与银行卡安全POINT VALUE, EXTERNAL SPENDING & CARD SAFETY

本页规定积分的固定价值、外部银行卡消费积分的合法数据来源，以及绑定银行卡时必须遵守的安全边界。This page defines the fixed point value, lawful data sources for external card-linked rewards, and the required security boundaries for linked cards.

01RULE

积分核心规则CORE POINTS RULES

积分价值与最高抵扣比例必须按照以下标准执行，不得更改成其他兑换比例。The point value and maximum redemption percentage must follow these standards and may not be converted to another ratio.

  1. 客户每完成 $1 合格消费，获得 1 积分。

    A member earns 1 point for every completed $1 of qualifying spend.

  2. 1 积分在星耀联城商城抵扣时等于 $1。不得设计成“10积分抵扣$1”或“100积分抵扣$1”。

    1 point equals $1 of redemption value in the XinggClub store. It must not be changed to 10 points or 100 points per $1.

  3. 商品订单最多使用 50% 积分；剩余至少 50% 必须通过信用卡、借记卡或网站现有支付方式支付。

    Points may cover no more than 50% of eligible merchandise. At least 50% must be paid by credit card, debit card, or another supported payment method.

  4. 没有积分的客户按照商品正常零售价 100% 付款。

    Members without points pay 100% of the normal retail price.

  5. 积分不能提现、不能转账、不能偿还信用卡，也不能兑换现金。

    Points cannot be cashed out, transferred, used to repay a credit card, or exchanged for cash.

  6. 税费、运费和服务费默认全部使用现金支付，不允许积分抵扣。

    Taxes, shipping, and service fees must be paid in cash by default and are not eligible for point redemption.

  7. 示例：$100 商品，0积分支付 $100；30积分支付 $70＋30积分；50积分支付 $50＋50积分；100积分仍最多使用50积分，支付 $50，剩余50积分继续保留。

    Example: for a $100 item, use $100 cash with 0 points; $70 cash plus 30 points with 30 points; $50 cash plus 50 points with 50 points; with 100 points, only 50 may be used and the other 50 remain.

  8. 可使用积分＝客户可用积分余额、商品允许积分额度、商品价格50%三者中的最小值。

    Usable points equal the smallest of the member’s available balance, the item’s allowed point amount, and 50% of the item price.

  9. 现金商品金额＝商品价格－实际使用积分；最终现金支付金额还要加上税费、运费和其他必须现金支付的费用。

    Cash merchandise amount equals item price minus points used. Taxes, shipping, and other cash-only charges are then added to the final cash payment.
02RULE

外部银行卡消费积分EXTERNAL CARD-LINKED REWARDS

客户可以自愿绑定信用卡或借记卡，但网站只有在获得正式授权的交易数据后才可以识别外部合格消费。Members may voluntarily link a credit or debit card, but external qualifying transactions may be recognized only through formally authorized transaction data.

  1. 每完成 $1 合格外部消费获得 1 积分，不足 $1 的部分默认向下取整。

    Each completed $1 of qualifying external spend earns 1 point, with fractional dollars rounded down by default.

  2. 只有已经入账的交易才能正式发放积分；Pending 交易可以显示“待确认积分”，但不能使用。

    Only posted transactions may issue usable points. Pending transactions may show pending points, but those points cannot be redeemed.

  3. 退款、撤销、拒付或交易争议发生后，必须自动扣回对应积分；部分退款按照退款金额等额扣回积分。

    Refunds, reversals, chargebacks, or disputes must reverse the corresponding points. Partial refunds reverse points in proportion to the refunded amount.

  4. 同一笔外部交易不得重复发放积分。

    The same external transaction must never issue points more than once.

  5. 网站不得假装已经能够读取所有信用卡交易。外部刷卡识别必须通过合规的 Card-Linked Offers、银行交易数据合作方或其他正式授权接口。

    The website must not claim it can already read every card transaction. External card activity requires a compliant Card-Linked Offers program, bank-data partner, or another formally authorized interface.

  6. 未取得真实外部交易接口前，只完成系统架构、数据库、Provider Adapter 适配层和测试环境；前台不得宣传“任何地方刷卡都已自动积分”。

    Before a live transaction provider is available, only the architecture, database, provider adapter, and test environment may be completed. The public site must not advertise automatic rewards for spending anywhere.

  7. 外部交易服务必须设计成可替换的 Provider Adapter，未来可以接入 Visa、Mastercard、Plaid 或其他合作方，不得永久绑定一家供应商。

    External transaction services must use a replaceable Provider Adapter so Visa, Mastercard, Plaid, or another partner can be connected later without permanent vendor lock-in.
03RULE

银行卡安全PAYMENT CARD SECURITY

绑卡必须由合规第三方托管并使用 Token；星耀联城网站不得直接保存敏感银行卡认证资料。Card linking must be hosted by a compliant third party and use tokens. XinggClub must not directly store sensitive card authentication data.

  1. 网站不得保存完整银行卡号、CVV 或客户网银密码。

    The website must not store full card numbers, CVV codes, or online-banking passwords.

  2. 必须使用第三方托管绑卡页面和 Token 令牌。

    A third-party hosted card-linking page and tokenized references are required.

  3. 本地数据库只允许保存：第三方账户ID、Token或Token引用、卡品牌、卡号末四位、发卡机构、绑定状态、授权时间、授权版本和解绑时间。

    The local database may store only the provider account ID, token or token reference, card brand, last four digits, issuer, link status, authorization time, authorization version, and unlink time.

  4. 客户必须可以随时解绑并撤回交易数据授权；解绑后立即停止接收新交易。

    Members must be able to unlink at any time and withdraw transaction-data consent. New transaction collection must stop after unlinking.

  5. 历史积分账目和审计记录按照适用法律及财务要求保留。

    Historical point ledgers and audit records are retained as required by applicable law and financial controls.

  6. 所有敏感数据必须加密，后台权限实行最小化控制。

    All sensitive data must be encrypted and administrative access must follow least-privilege controls.

  7. 日志不得输出银行卡信息、Token、密钥或完整交易数据。

    Logs must not expose card information, tokens, secrets, or complete transaction data.