Privacy Policy
Data Processing and Privacy Notice
Published: July 2026.
This page is the complete record of how this website (the "Site", "we", "us") handles personal data when you use it to read about Tower Rush by Galaxsys or to compare the casino operators that distribute it. It covers what data we collect, the reason for each type, who might receive it, how long it is retained, and what rights you have. Everything here applies to this Site only.
Using this Site means accepting the practices described here. The moment you navigate to a casino platform, that casino's own privacy documentation takes over entirely. We have no influence over casino privacy policies and no access to data you provide those platforms. We recommend reading a casino's privacy terms before entering payment details.
Written to be clear and practically useful. Questions and rights requests go through the contact form – no justification needed, just state which right you want to exercise.
// Contents
// Who Is Responsible
The entity operating this Site determines what personal data is collected and for what purposes – this is the role of a data controller under applicable data protection law. All questions, requests, and concerns go through the contact form on this Site. We respond within 30 calendar days.
// Data We Hold
Data you provide by submitting a form. When you use the contact form or subscribe to the newsletter, we receive your name, email address, and the content of your message. We do not request anything beyond what each function actually needs.
Data our servers collect automatically on every visit. Standard server logs record:
- Your IP address and the broad geographic area it corresponds to.
- Browser type and version, and the operating system of your device.
- Whether you’re on desktop, tablet, or mobile.
- Which Tower Rush articles and casino comparison pages you visit, and how long you spend on each.
- How you reached this Site: a search result, an external link, or direct navigation.
- The date and time of your visit.
None of these data points identifies you by name on its own. In combination, some can qualify as personal data under applicable law, and we treat all of them with care regardless. You don’t need to create an account to use this Site. We collect nothing beyond what each specific function requires.
What this Site does not hold: anything about your gambling at any casino. When you click through to a partner casino from this Site, the affiliate tracking cookie records that single click. From that point on – your Tower Rush sessions, the tower heights at which you cashed out, which bonus mechanics appeared during rounds, your account balance movements – all of that is processed by Galaxsys’s technology on casino infrastructure. We cannot see any of it. Commission reports we receive from affiliate networks confirm only that a qualifying referral occurred and carry no personal data identifying you. No live data channel of any kind runs between this Site and any casino.
A Tower Rush-specific note that is worth making explicit: the game has no auto-cashout feature. Every cashout a player makes is a live manual action taken during a round that is still in progress. There is no preset exit target, no automated cashout event, and no timer-based mechanism that could generate any data observable from outside the casino’s own infrastructure. The affiliate tracking cookie captures the click. Everything inside the Tower Rush session – including every Frozen Floor activation, every Temple Floor threshold, every Triple Build window, and every manual cashout decision – is handled entirely on casino infrastructure and is completely outside the data visibility of this Site.
We apply consistent data minimization across our operations: no cross-referencing of data sources to build reader profiles, no device fingerprinting to track users across sessions after cookies are cleared, no behavioral profiling of individual readers. Our analytics tool produces aggregate statistics across all visitors combined, not records tied to specific individuals.
// Why We Process Personal Data
- Keeping the Site technically operational across browsers and devices.
- Understanding in aggregate which Tower Rush editorial content generates genuine reader engagement.
- Responding to contact form submissions.
- Sending newsletters to subscribers who have given informed consent.
- Detecting and limiting automated or abusive use of the Site.
- Attributing affiliate referral commissions when qualifying casino registrations occur from clicks on this Site.
- Meeting any applicable legal obligation or complying with valid legal orders.
None of these activities involves automated decision-making that produces legal effects or similarly significant consequences for individual visitors. Engagement analytics are always aggregate. We do not build or maintain behavioral profiles of specific individuals.
// Legal Basis for Processing
Legitimate interest. Operating, securing, and improving this Site, and understanding aggregate Tower Rush content engagement. These interests have been assessed as proportionate and as not overriding visitors’ reasonable data protection expectations.
Consent. Non-essential cookies and newsletter subscriptions. Both are genuinely voluntary and may be withdrawn at any time without affecting any processing that occurred while consent was in place.
Performance of a contract or pre-contractual step. Responding to contact form messages you have actively sent to us.
Legal obligation. Anything that applicable law or a valid legal order specifically requires of us.
Each activity is assigned to the basis that accurately fits it. Every third-party processor we use operates under a written data processing agreement that defines the scope of permitted use, requires equivalent security standards, and explicitly bars the processor from using the data for their own purposes. We review these arrangements on a periodic basis.
// International Transfers
Some of the service providers we use, particularly analytics tools, are headquartered outside your country and may process data in other jurisdictions. We rely on Standard Contractual Clauses or equivalent approved transfer mechanisms to ensure adequate protection for any data processed outside the country where it originates. We review these arrangements periodically.
// How Long We Retain Data
- Analytics data via Google Analytics cookies: up to 26 months under standard configuration.
- Contact form submissions: for the duration of the relevant interaction, then deleted unless a legal obligation requires longer retention.
- Newsletter subscriber email addresses: until you unsubscribe or withdraw consent.
- Affiliate click tracking data: only as long as needed to determine whether a commission is payable, typically under 90 days.
When data has served its purpose and no legal retention requirement applies, we delete it or anonymize it to a standard that makes re-identification not realistically possible. Data that has become inaccurate can be corrected by contacting us via the contact form.
// Security and Data Minimization
We collect only what each function genuinely requires. No account is necessary to access any content on this Site. We do not cross-reference data sources to build reader profiles and do not use device fingerprinting techniques. Proportionate technical and organizational security measures are in place, including access controls restricting which individuals within our operations can access personal data. If you identify a security concern that may involve data we hold about you, please contact us immediately through the contact form.
// Your Rights
Depending on the data protection law applicable to you, you may have the right to: access personal data we hold about you; correct inaccurate data; request deletion where continued retention is not justified; restrict how we process your data; receive your data in a portable format; object to processing based on our legitimate interest; and withdraw consent you have previously given. Submit any request through the contact form, identifying which right you wish to exercise. We will verify identity where appropriate and respond within 30 days. Residents of the EU and UK who are unsatisfied with our response may escalate to their national supervisory authority – in the UK, the Information Commissioner’s Office at ico.org.uk.
// Children
This Site is not intended for anyone under the age of 18. Tower Rush is a real-money gambling product involving live manual cashout decisions under session pressure. It is adult content in substance. We do not knowingly collect personal data from minors. If you have reason to believe a child has submitted personal data through this Site, please contact us and we will delete it promptly.
// Third-Party Casino Platforms
This policy applies to this Site only. Casino platforms accessible through links on this Site operate under their own privacy policies and data practices, which take effect from the moment you arrive on their platform. We recommend reviewing a casino’s privacy documentation before providing payment information or other sensitive personal details.
// Updates to This Policy
We review and update this policy as our practices evolve or as applicable law changes. The version currently published here is always the operative one, with the most recent effective date shown. Material changes to how we process personal data will be evident in the revised text. Your continued use of this Site following any update constitutes acceptance of the revised practices.
// Contact
Privacy questions, rights requests, and concerns about data practices go through the contact form on this Site.