Privacy Policy

Galaxsys is the data controller responsible for your personal data. For data protection inquiries, contact our Data Protection Officer at: [email protected]

3.1 Personal Information You Provide:

• Account registration data (name, email address, date of birth, country of residence)
• Identity verification documents (as required by gaming regulations)
• Payment information (processed securely through licensed payment providers)
• Communications with customer support

3.2 Automatically Collected Information:

• Device information (IP address, browser type, operating system, device ID)
• Usage data (game activity, session duration, betting patterns)
• Cookies and similar tracking technologies (see our Cookie Policy)
• Location data (country/region based on IP address)

We process your personal data based on the following legal grounds:

• Contract Performance: To provide gaming services you've requested
• Legal Obligation: To comply with gaming regulations, AML/KYC requirements, and age verification
• Legitimate Interest: To improve our services, prevent fraud, and ensure platform security
• Consent: For marketing communications and non-essential cookies (you can withdraw consent anytime)

• To provide and operate Tower Rush gaming services
• To verify your age and identity (legal requirement for gambling services)
• To process deposits and withdrawals securely
• To comply with gaming regulations and anti-money laundering laws
• To promote responsible gaming and detect problem gambling patterns
• To personalize your experience and provide customer support
• To send important account notifications (with your consent for marketing)
• To analyze usage patterns and improve our services
• To prevent fraud, cheating, and ensure platform security

We use cookies and similar technologies as detailed in our Cookie Policy. We obtain your consent before placing non-essential cookies. You can manage cookie preferences at any time through our cookie consent banner or in your browser settings.

7.1 We may share your data with:

• Licensed Casino Operators: Where you choose to play Tower Rush
• Payment Processors: To process deposits/withdrawals (e.g., Trustly, Skrill, Visa/Mastercard)
• Gaming Regulators: MGA, UKGC, and other licensing authorities as required
• Identity Verification Providers: For KYC/AML compliance
• Service Providers: Hosting, analytics, customer support (under strict data processing agreements)
• Law Enforcement: When legally required

7.2 International Data Transfers:

Your data may be transferred outside the EU/EEA. We ensure adequate protection through:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Certified privacy frameworks (where applicable)

We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Secure servers with firewall protection
• Regular security audits and vulnerability assessments
• Access controls and employee confidentiality agreements
• Secure payment processing through PCI-DSS compliant providers

We retain your personal data only as long as necessary:

• Account data: Duration of account + 5 years (gaming regulation requirement)
• Transaction records: 5 years (AML/financial regulation requirement)
• Marketing data: Until you withdraw consent or 2 years of inactivity
• Cookies: As specified in our Cookie Policy (typically 12 months)

As an EU/EEA resident, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data (subject to legal retention requirements)
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time (doesn't affect prior processing)
• Right to Lodge a Complaint: Contact your local data protection authority

To exercise your rights, email: [email protected] or contact our Data Protection Officer.

Tower Rush is strictly for users 18+ (21+ in Belgium, Greece). We do not knowingly collect data from minors. If we discover a minor has provided personal data, we will immediately delete it and close the account.

We use automated systems to:

• Detect unusual betting patterns (fraud prevention)
• Identify potential problem gambling behavior (responsible gaming)
• Verify identity and prevent duplicate accounts (KYC compliance)

You have the right to request human review of any automated decision that significantly affects you.

We may update this Privacy Policy to reflect legal, operational, or regulatory changes. We will notify you of significant changes via email or prominent website notice at least 30 days before changes take effect. Continued use after changes indicates acceptance.

Last Updated: January 2026

Data Protection Officer (DPO): [email protected]

General Inquiries: [email protected]

EU Representative: Galaxsys, Malta (MGA Licensed)

If you're unsatisfied with how we handle your data, you have the right to lodge a complaint with your local data protection authority:

• UK: Information Commissioner's Office (ICO) – ico.org.uk
• Germany: Federal Commissioner for Data Protection – bfdi.bund.de
• EU-wide: Find your authority at edpb.europa.eu