Possible to sue companies for lack of security/support?

Explain to me why there are receipts and why we have them then.

If I charge $20 and get hacked soon after because of a database breach I had no control over, then that security of my payment, which is not a donation is broken. You can say in the TOS that NX has no tangible value outside of the game and you're essentially giving it away, but the fact remains it does. The TOS can say anything he wants, but like law, if fact's contradict then it's questionable.

It's a business not a not profit organization, whether it's a service or not is irrelevant.

Pretty much this.