1. Introduction
This Privacy Policy explains how Tower Rush by Galaxsys ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and play our game. This policy complies with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws. Please also review our Terms and Conditions and Cookie Policy for complete information.
2. Data Controller
Galaxsys is the data controller responsible for your personal data. For data protection inquiries, contact our Data Protection Officer at: dpo@towerrash.com
3. Information We Collect
3.1 Personal Information You Provide:
- Account registration data (name, email address, date of birth, country of residence)
- Identity verification documents (as required by gaming regulations)
- Payment information (processed securely through licensed payment providers)
- Communications with customer support
3.2 Automatically Collected Information:
- Device information (IP address, browser type, operating system, device ID)
- Usage data (game activity, session duration, betting patterns)
- Cookies and similar tracking technologies (see our Cookie Policy)
- Location data (country/region based on IP address)
4. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Contract Performance: To provide gaming services you've requested
- Legal Obligation: To comply with gaming regulations, AML/KYC requirements, and age verification
- Legitimate Interest: To improve our services, prevent fraud, and ensure platform security
- Consent: For marketing communications and non-essential cookies (you can withdraw consent anytime)
5. How We Use Your Information
- To provide and operate Tower Rush gaming services
- To verify your age and identity (legal requirement for gambling services)
- To process deposits and withdrawals securely
- To comply with gaming regulations and anti-money laundering laws
- To promote responsible gaming and detect problem gambling patterns
- To personalize your experience and provide customer support
- To send important account notifications (with your consent for marketing)
- To analyze usage patterns and improve our services
- To prevent fraud, cheating, and ensure platform security
6. Cookies and Tracking Technologies
We use cookies and similar technologies as detailed in our Cookie Policy. We obtain your consent before placing non-essential cookies. You can manage cookie preferences at any time through our cookie consent banner or manage cookies here.
7. Data Sharing and Transfers
7.1 We may share your data with:
- Licensed Casino Operators: Where you choose to play Tower Rush
- Payment Processors: To process deposits/withdrawals (e.g., Trustly, Skrill, Visa/Mastercard)
- Gaming Regulators: MGA, UKGC, and other licensing authorities as required
- Identity Verification Providers: For KYC/AML compliance
- Service Providers: Hosting, analytics, customer support (under strict data processing agreements)
- Law Enforcement: When legally required
7.2 International Data Transfers:
Your data may be transferred outside the EU/EEA. We ensure adequate protection through:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
- Certified privacy frameworks (where applicable)
8. Data Security
We implement industry-standard security measures including:
- SSL/TLS encryption for all data transmission
- Secure servers with firewall protection
- Regular security audits and vulnerability assessments
- Access controls and employee confidentiality agreements
- Secure payment processing through PCI-DSS compliant providers
9. Data Retention
We retain your personal data only as long as necessary:
- Account data: Duration of account + 5 years (gaming regulation requirement)
- Transaction records: 5 years (AML/financial regulation requirement)
- Marketing data: Until you withdraw consent or 2 years of inactivity
- Cookies: As specified in our Cookie Policy (typically 12 months)
10. Your Rights Under GDPR
As an EU/EEA resident, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data (subject to legal retention requirements)
- Right to Restriction: Limit how we process your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for marketing purposes
- Right to Withdraw Consent: Withdraw consent at any time (doesn't affect prior processing)
- Right to Lodge a Complaint: Contact your local data protection authority
To exercise your rights, email: dpo@towerrash.com or contact our Data Protection Officer.
11. Children's Privacy
Tower Rush is strictly for users 18+ (21+ in Belgium, Greece). We do not knowingly collect data from minors. If we discover a minor has provided personal data, we will immediately delete it and close the account.
12. Automated Decision-Making and Profiling
We use automated systems to:
- Detect unusual betting patterns (fraud prevention)
- Identify potential problem gambling behavior (responsible gaming)
- Verify identity and prevent duplicate accounts (KYC compliance)
You have the right to request human review of any automated decision that significantly affects you.
13. Changes to This Policy
We may update this Privacy Policy to reflect legal, operational, or regulatory changes. We will notify you of significant changes via email or prominent website notice at least 30 days before changes take effect. Continued use after changes indicates acceptance.
Last Updated: January 2025
14. Contact Information
Data Protection Officer (DPO): dpo@towerrush.com
General Inquiries: support@towerrush.com
EU Representative: Galaxsys, Malta (MGA Licensed)
15. Supervisory Authority
If you're unsatisfied with how we handle your data, you have the right to lodge a complaint with your local data protection authority: