Tower Rush

Privacy Policy

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how long we keep it, who we share it with, and what rights you have. We are committed to handling your personal information with care and in compliance with applicable data protection law, including the UK GDPR, EU GDPR, and comparable frameworks where relevant.

1. Who We Are

This website is an independent affiliate publisher providing informational and editorial content about online casino games and operators. We are the data controller for personal information collected through this site. We do not operate a casino, accept deposits, process gambling transactions, or act as a licensed gambling operator in any jurisdiction.

For the purposes of data protection law, the data controller is the operator of this website. Contact details for data protection enquiries are provided at the end of this policy.

2. What Data We Collect and How

2.1 Information You Provide Directly

When you contact us via the contact form on the About Us page, we collect the information you submit. This typically includes your name and email address, and the content of your message. We do not request sensitive personal data (such as financial information, government ID numbers, or health data) through any contact form on this site, and you should not submit such information voluntarily.

2.2 Data Collected Automatically

When you visit this site, certain data is collected automatically through standard web server and analytics technologies. This may include:

  • Your IP address (which may indicate your approximate geographic location at the city or country level).
  • Browser type, version, and language settings.
  • Device type and operating system.
  • The URL of the page that referred you to this site (referral URL).
  • Pages visited on this site and time spent on each page.
  • Date and time of your visit.
  • Clicks on outgoing links, including affiliate links to casino operators.

This data is primarily collected in aggregate form for the purpose of understanding how the site is used and improving its performance. It is not used to identify individual users unless a specific legal obligation or legitimate interest requires it.

2.3 Affiliate Tracking Data

When you click a link to a partner casino on this site, an affiliate tracking mechanism (typically a cookie and/or URL parameter) records the referral. This allows the casino operator’s affiliate system to attribute any subsequent qualifying action (such as registration or deposit) to this site. The data generated includes a click timestamp, an anonymised session identifier, and the destination URL. It does not include your name, email address, or payment information. Full details of how we use cookies for tracking purposes are set out in the Cookie Policy.

2.4 Data from Third-Party Analytics

We may use third-party analytics services, such as Google Analytics, to collect aggregated data about site usage. These services may collect data such as session duration, page views, device type, and geographic region. They do this using cookies and similar technologies. The data is processed by the third-party provider in accordance with their own privacy policy and is not combined with personally identifiable data by us.

3. Legal Basis for Processing

We process personal data only where we have a lawful basis to do so. The applicable bases are:

  • Legitimate interests: we have a legitimate interest in operating and improving this website, which includes collecting analytics data, managing affiliate referral tracking, and preventing abuse. We have assessed that these interests are not outweighed by the rights and interests of data subjects.
  • Consent: where we rely on consent, such as for non-essential cookies or for marketing communications, we obtain this explicitly and separately. Consent can be withdrawn at any time without detriment.
  • Contract: where you contact us and we respond, the processing is necessary to fulfil your request.
  • Legal obligation: where applicable law requires us to retain or disclose certain data, we process it to comply with that obligation.

4. How We Use Your Data

We use the data we collect for the following purposes:

  • To operate, maintain, and improve this website and its content.
  • To respond to enquiries, complaints, and factual correction requests submitted through the contact form.
  • To track affiliate referrals and report qualifying conversions to partner casino operators for the purpose of commission calculation.
  • To monitor site security and detect and prevent fraudulent or abusive access.
  • To comply with legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.
  • To conduct an internal analysis to understand content performance and user engagement in aggregate.

We do not use personal data for automated decision-making that produces legal or similarly significant effects on individuals. We do not build individual user profiles for advertising purposes. We do not sell, rent, or otherwise transfer personal data to third parties for their own marketing purposes.

5. Sharing of Data

5.1 Affiliate and Casino Partners

When you click an affiliate link and visit a partner casino, that casino operator will collect data about you in accordance with their own privacy policy from the moment you land on their platform. We pass only the minimum information necessary for affiliate attribution, typically a session identifier and click timestamp. We are not responsible for the data practices of casino operators once you leave this site.

5.2 Analytics Providers

We share aggregated, anonymised usage data with analytics service providers such as Google Analytics. These providers process data as data processors acting on our instructions, under data processing agreements that prohibit them from using the data for independent purposes.

5.3 Legal Disclosure

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of the site operator, users of the site, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the business, personal data may be transferred to the new owner as part of that transaction. You will be notified of any such transfer and any change in the applicable privacy policy.

6. Retention of Data

We retain personal data for no longer than is necessary for the purposes for which it was collected:

  • Contact form submissions: retained for up to 12 months from the date of submission, after which they are deleted unless a legal obligation requires longer retention.
  • Analytics data: collected in aggregate form with no long-term retention of individual session data beyond what the analytics provider’s own retention settings permit (typically 14 months for Google Analytics).
  • Affiliate tracking cookies: expire as described in the Cookie Policy, typically within 30 to 90 days.
  • Server logs: retained for a maximum of 90 days for security monitoring purposes, after which they are overwritten or deleted.

7. Your Rights

Depending on your location and applicable data protection law, you may have the following rights:

  • Right of access: to request confirmation of whether we hold personal data about you and to receive a copy of that data.
  • Right to rectification: to request correction of inaccurate or incomplete personal data.
  • Right to erasure: to request deletion of personal data where there is no longer a lawful basis for processing it.
  • Right to restriction: to request that we limit processing of your data in certain circumstances, for example while a dispute about accuracy is resolved.
  • Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
  • Right to object: to object to processing based on legitimate interests, including profiling.
  • Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
  • Right to lodge a complaint: to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO) at ico.org.uk. In the EU, you may contact your national data protection authority.

To exercise any of these rights, contact us using the contact form on the About Us page. We will respond within 30 days of receipt of a verifiable request. We may ask you to verify your identity before processing certain requests.

8. International Data Transfers

Some of our service providers, including analytics platforms, may be located outside the UK or European Economic Area (EEA). Where personal data is transferred to countries that have not been assessed as providing an adequate level of protection, we ensure that appropriate safeguards are in place. These safeguards may include Standard Contractual Clauses approved by the European Commission or equivalent mechanisms recognised under applicable law.

9. Security

We take reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include the use of HTTPS encryption for data in transit and access controls limiting who can access stored data.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of personal data transmitted to or stored by this site, and transmission is at your own risk.

10. Children

This website is not directed at individuals under the age of 18 and does not knowingly collect personal data from minors. If you have reason to believe that a child has submitted personal data through this site, please contact us and we will take steps to delete that data promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or applicable law. Changes will be published on this page with an updated date. We encourage you to review this page regularly. Where changes are material, we will take reasonable steps to draw them to your attention.

12. Contact and Complaints

For privacy-related enquiries, to exercise your data protection rights, or to raise a concern about our data practices, contact us via the contact form on the About Us page. We will acknowledge your request within five business days and respond fully within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.