Privacy Policy
Privacy and Data Protection Policy
This Privacy and Data Protection Policy sets out how this website (the "Site", "we", "us") collects, uses, stores, retains, and protects personal data that arises when you use it to read about Tower Rush by Galaxsys or to compare the casino operators through which that game is distributed – what we hold, why we hold it, the legal basis for each processing activity, who may receive it, how long it is kept, and the rights available to you under applicable data protection law.
// Statement Overview and Data Controller
This Privacy and Data Protection Policy (the “Policy”) sets out how this website (the “Site”, “we”, “us”) collects, uses, stores, retains, and protects personal data that arises when you use it to read about Tower Rush by Galaxsys or to compare the casino operators through which that game is distributed. It describes what data we hold, why we hold it, the legal basis for each processing activity, who may receive it, how long it is kept, and the rights available to you under applicable data protection law. This Policy is the complete account of our data practices, not a summary of them.
The entity that operates this Site decides what personal data is collected and for what purposes, which makes it the data controller for all processing connected to your use of this Site. All inquiries, concerns, and formal rights requests should be submitted via the contact form on this Site, and we respond substantively within 30 calendar days.
This Policy is written to be genuinely useful rather than formally adequate in the minimum sense. The contact form is available for any question about our data practices or to exercise any right described below. A rights request requires no explanation or justification – naming the right you wish to invoke is enough to begin.
// Scope of This Statement
Using this Site constitutes acceptance of the practices described here. This Policy applies to this Site only.
From the moment you navigate to any casino platform, that casino’s own privacy policy governs everything that happens there. We have no influence over casino privacy policies and no visibility into how casinos handle any data you provide them. We recommend reviewing a casino’s privacy documentation before sharing any financial or personal information with it.
For anything concerning the personal data that arises from your use of this Site, the contact form is the correct channel, and we respond substantively within 30 calendar days.
// Data We Process
Two distinct streams of information exist: what you provide to us directly, and what is generated automatically as you browse.
Data Provided Directly
Where you complete a contact form or sign up for a newsletter, we receive your name, email address, and the content of any message you include. We collect only what each specific function requires.
Data Generated Automatically on Every Visit
Standard server infrastructure records the following for each visit to this Site:
- The IP address of the connecting device and the approximate geographic region it maps to.
- Browser type, version number, and the operating system of the connecting device.
- Device category: desktop, tablet, or phone.
- Which Tower Rush articles and casino comparison pages you visit, and how long you spend on each.
- How you arrived: a search engine result, an external link, or direct navigation.
- The date and time of the visit.
None of this individually names you. In combination, certain fields can qualify as personal data under applicable data protection law, and we treat all of it carefully regardless of that threshold. A data minimization principle governs our approach throughout: no account is required to read any content on this Site, and we never collect more data than each specific function genuinely needs.
// Legal Basis for Each Activity
We have matched each processing activity to the legal basis that most accurately reflects its purpose, rather than applying consent as a universal justification for everything.
Legitimate Interest
Running, securing, and improving this Site and understanding aggregate reader engagement with Tower Rush content. We have assessed this interest as proportionate to the data involved and as not overriding the reasonable data protection expectations of visitors to this Site.
Consent
Non-essential cookies and newsletter communications. Consent in both cases is genuinely voluntary and may be withdrawn at any time without affecting the lawfulness of any processing carried out while consent was active.
Performance of a Contract
Processing necessary to respond to a contact form submission you have actively sent to us.
Legal Obligation
Any processing that applicable law or a valid legal order specifically requires.
Every third-party data processor engaged by this Site operates under a written agreement that specifies the authorized scope of processing, requires equivalent security protections, and expressly prohibits use of the data for the processor’s own purposes. We review all processor relationships periodically to verify continued compliance.
// Purposes of Processing
We process the data described above for these specific purposes:
- Keeping this Site technically functional and performant across the range of devices and browsers used by our readers.
- Understanding, in aggregate across all visitors, which Tower Rush editorial content generates the most genuine reader engagement, so we can direct editorial resources toward the most useful material.
- Responding substantively to contact form submissions.
- Sending newsletters to subscribers who have positively opted in to receive them.
- Detecting and limiting abusive, fraudulent, or automated misuse of this Site.
- Crediting affiliate referral commissions when a qualifying registration occurs at a casino from a click on this Site within the attribution window.
- Meeting any applicable legal obligation imposed by law or a valid legal order.
None of these activities involves automated decision-making that produces legal effects or other consequences of comparable significance for individual visitors. All analysis of engagement data is aggregate across all visitors, and no individual behavioral profile is built, stored, or applied in connection with any visitor to this Site. On the newsletter specifically: where you have subscribed, your email address is used only for the newsletter you enrolled in. We do not share it with third parties for their own marketing and do not supplement our subscriber list with externally sourced contact data. Every newsletter includes a clearly labeled unsubscribe link that takes immediate effect on use, and any new category of communication would require fresh consent before being sent.
// Affiliate Links and Casino Platforms
This Site carries affiliate links to casino platforms that distribute Tower Rush, and one boundary needs to be explicit: we hold no data whatsoever about your gambling activity at any casino. When you navigate to a partner casino from this Site, the affiliate tracking cookie registers a single click event, and that is the whole mechanism. What follows – your Tower Rush sessions, the heights at which you cashed out, which bonus floors activated during rounds, the multiplier levels you reached or missed, your account balance – is processed on casino infrastructure running Galaxsys’s technology and is entirely invisible to us.
Commission reports we receive from affiliate networks contain only a confirmation that a qualifying referral occurred; they carry no personal data about you. There is no live data connection of any kind between this Site and any casino. Tower Rush has no auto-cashout feature: every cashout decision is made by the player manually in real time during a live round, so there is no pre-configured exit target, no automated cashout mechanism, and no timer-based exit setting that any external system on this Site could record, observe, or interact with. The only Tower Rush-related data point this Site ever sees is the single click the affiliate tracking cookie records when you navigate away toward a casino.
Everything that happens inside a Tower Rush session – every activation of Frozen Floor, Temple Floor, or Triple Build; every multiplier level; every manual cashout decision; every collapse – is processed on casino infrastructure and is completely invisible to us. Questions about specific session outcomes belong with the casino that operated those sessions. We describe the mechanics; Galaxsys designs and licenses the game; casinos operate it. Those are distinct roles with distinct data visibility.
// Cookies and Analytics
This Site uses cookies for three purposes: maintaining the technical functions essential to Site operation; generating aggregate statistical data about reader engagement with Tower Rush content; and recording affiliate referral events when readers navigate to partner casinos. Necessary cookies operate at all times and cannot be disabled, because the Site depends on them.
Analytics cookies via Google Analytics produce aggregated output with no link to identifiable individuals. Affiliate tracking cookies record a single click event and a timestamp at the moment you navigate to a partner casino; they capture nothing about your subsequent activity on that platform. Everything we learn about which parts of our Tower Rush coverage readers find useful comes from this aggregated view across the full visitor base, never from a profile of any specific individual.
Every third-party processor involved is bound by a written agreement specifying the authorized purpose, requiring equivalent security standards, and prohibiting use of the data for the processor’s own purposes. Full technical detail and management options are provided in our Cookie Policy.
// Data Sharing
This Site does not sell personal data in any form. Data is shared only in the following specifically bounded circumstances:
- Analytics service providers, principally Google Analytics, who process aggregated usage data under their own data processing terms with us.
- Casino affiliate networks and partner operators, who receive only the click-attribution data necessary to verify commission eligibility, with no personal identifying information about you included.
- Courts, regulatory authorities, or law enforcement agencies where disclosure is required by a valid and applicable legal obligation.
- A successor entity in the event this Site is transferred, sold, or merged, where the transfer agreement requires the successor to maintain the practices described in this Policy.
Each organization that receives data from us is contractually barred from using it for its own purposes, required to maintain security standards at least equivalent to our own, and required to notify us promptly of any security incident involving that data. We review all data sharing arrangements on a periodic basis.
// Retention Periods
Each category of data is kept only for as long as it is genuinely needed:
- Analytics data collected via cookies: up to 26 months under the standard Google Analytics configuration.
- Contact form messages: retained for the duration of the relevant inquiry, then deleted unless a legal obligation requires us to retain them for longer.
- Newsletter subscriber email addresses: until you unsubscribe or formally withdraw consent.
- Affiliate click attribution data: only for as long as is necessary to verify commission eligibility, typically no more than 90 days.
Once data has served the purpose for which it was collected and no legal retention obligation prevents deletion, we delete it or render it anonymous to a standard from which re-identification is not practicable. Data you have provided that has become inaccurate can be corrected by submitting a request through the contact form at any time.
// Your Rights
Depending on the data protection law applicable in your jurisdiction, you may have some or all of the following rights:
- To access the personal data we hold about you.
- To require correction of inaccurate data.
- To require deletion where continued retention is no longer justified.
- To restrict certain processing activities.
- To receive your data in a portable, machine-readable format.
- To object to processing based on legitimate interest, and to withdraw consent for processing based on consent.
To exercise any right, submit a request through the contact form and name the right you wish to invoke. We verify your identity where appropriate, respond within 30 calendar days, and generally do not charge for the exercise of these rights. EU and UK residents whose concerns are not resolved to their satisfaction may escalate them to the relevant national supervisory authority; in the United Kingdom this is the Information Commissioner’s Office, accessible at ico.org.uk.
Consent for non-essential cookies may be withdrawn at any time through the cookie preference panel accessible from the Site footer. Consent for newsletters is withdrawn by using the unsubscribe link included in every newsletter email. In each case, withdrawal does not affect the lawfulness of processing carried out while consent was in place.
// Minors
This Site is not for anyone under the age of 18. Tower Rush is a real-money gambling product built around live manual cashout decisions and genuine financial risk; the content here is adult in substance, not merely formally age-gated.
We do not knowingly process personal data submitted by minors. If you have reason to believe that someone under 18 has submitted personal data through this Site, please notify us through the contact form and we will act promptly to delete it.
// Security and Minimization
We collect only the data that each specific function of this Site genuinely requires, and no more. No account or registration is required to read any content on this Site. We do not cross-reference data from different sources to construct behavioral profiles of individual visitors, and we do not employ device fingerprinting to track visitors across sessions after cookies are cleared.
Proportionate technical and organizational security measures are applied, including access controls that limit which individuals within our operations can access personal data.
If you become aware of any security concern that may affect data we hold about you, please contact us immediately through the contact form.
// International Transfers
Some service providers engaged by this Site, particularly analytics platforms, are based in countries other than your own and may process data in those countries.
Where such transfers occur, we rely on Standard Contractual Clauses or another recognized transfer mechanism to ensure that the data receives adequate protection wherever it is processed. We review these safeguards periodically rather than treating them as permanently valid from initial setup.
// Third-Party Sites
This Policy applies exclusively to this Site. Casino platforms reached via our links are governed by their own privacy policies from the point you arrive there.
We recommend reading a casino’s privacy documentation before sharing payment details or other sensitive information.
// Updates
We may revise this Policy as our practices evolve, as technology changes, or as applicable legal requirements develop. The current version, published July 2026, is always available on this page with its effective date. Where any revision involves a materially significant change in how personal data is processed, we will make that change clearly visible within the revised document.
Continued use of this Site following any revision constitutes acceptance of the revised practices.
// Contact
All privacy-related inquiries and rights requests should be submitted through the contact form available on this Site.
Every legitimate inquiry receives a substantive response within 30 calendar days.