Effective date: 16 July 2026. Last updated: 16 July 2026.
Scope of the Tower Rush Privacy Policy
This Privacy Policy explains how towerrushplay.app collects, uses, retains, shares and protects information during use of our platform for the Galaxsys game Tower Rush. No deposits or withdrawals are processed here, and no UPI PIN, card CVV, password or one-time password is ever needed. The table below shows what this policy does and does not cover.
| Website interaction | Is it covered? |
|---|---|
| Visiting a page | Yes |
| Contact form | Yes |
| Cookie preferences | Yes |
| Reply to an enquiry | Yes |
| Outbound link until departure | Yes |
| Data on a third-party site after departure | No |
| Data held by Galaxsys | No |
| Data held by a casino or payment service | No |
| A copycat site | No |
Tower Rush and the Data-Protection Framework in India
The Digital Personal Data Protection Act, 2023 (the DPDP Act) was enacted on 11 August 2023. A phased commencement notification dated 13 November 2025 began bringing its provisions into force, and the substantive obligations in Sections 3 to 17 are expected to commence around 18 months after that date. The Act establishes the Data Protection Board of India and is built on principles including transparency, purpose limitation, data minimisation, accuracy, security and deletion when data is no longer needed. We aim to reflect those principles in this policy, but these notes are general information rather than legal advice.
Tower Rush: Information Provided Voluntarily
When our contact form is used, or an email is sent, the details shared may include a name, email address, a subject, a message and sometimes a URL being asked about. Only what is needed should be shared; passwords, one-time passwords, UPI PINs, card CVVs and full identity documents should not be sent, because they are not needed and cannot be secured on the sender's behalf. If a newsletter is ever enabled, an email address is collected only on subscription. Any feedback sent is used to reply and to improve the site.
Tower Rush: Information Collected Automatically
Like most websites, our hosting and security systems automatically record technical information on a visit, including the IP address, the date and time, the URL requested, the browser type, the operating system and device, the referring page, and the language and time-zone settings, along with security events. This gives an approximate region at most; precise GPS location is not collected. Usage and analytics information is collected only with consent, and outbound-link events may be recorded to understand which references are useful.
Tower Rush Cookies and Similar Technologies
We use a small number of cookies and similar technologies, and the optional ones can be switched off. The categories below are explained in full, with durations and controls, in our Cookie Policy.
| Category | Typical purpose | Consent approach |
|---|---|---|
| Strictly necessary | Security, delivery and preference | Applied where necessary |
| Functional | Optional display or language | Consent where required |
| Analytics | Aggregate usage | Disabled until consent is given |
| Outbound measurement | Link performance | Consent where non-essential |
| Advertising | Personalised promotion | Not used without a lawful basis and consent |
How Tower Rush Uses Personal Information
We use the limited information we handle only for the purposes below. We do not use that information to place bets, set gambling limits on anyone's behalf, predict game outcomes, or sell or rent data to casinos or gambling operators.
| Purpose | Data commonly involved |
|---|---|
| Deliver pages | IP, time, browser |
| Maintain security | Logs, IP |
| Diagnose problems | URL, device, error |
| Respond to enquiries | Name, email, message |
| Correct content | Report, source, URL |
| Remember privacy choices | Consent identifier |
| Measure performance | Analytics events |
| Manage subscriptions | Email, consent |
| Meet legal obligations | Necessary information |
| Establish or defend rights | Communications, logs |
Tower Rush Consent and Service or Security Necessity
We handle personal information on the lawful bases available to us. For core site delivery and security, we rely on what is necessary to provide the service requested and to keep our platform safe from abuse. For optional activities such as analytics and any non-essential cookies, we rely on consent, which can be withdrawn at any time. Withdrawing consent does not affect processing that already took place while consent was valid.
Tower Rush Google Analytics and Measurement Services
Where a measurement service such as Google Analytics is used, it is used only after consent has been given, and the contents of the contact form are not sent to it. Google Analytics offers user and event data-retention windows of 2 or 14 months, and we configure retention at no more than 14 months. Consent can be withdrawn at any time to stop further collection, and the browser and cookie controls described in our Cookie Policy can also be used.
Tower Rush Sharing and Disclosure
We do not sell personal information. We share limited information only with service providers who help us run the site, and only to the extent they need it, as summarised below.
| Provider category | Typical access |
|---|---|
| Website host | Requests, IPs, logs |
| CDN or security provider | Network events, threat indicators |
| Email provider | Contact messages |
| Consent-management tool | Cookie choices |
| Analytics | Consent-based usage |
| Backup provider | Encrypted records |
| Professional adviser | Information for legal or security needs |
We may also disclose information where the law requires it, to respond to a valid legal request, or to protect the safety, rights or property of visitors, the public or the site. If the site or its assets are ever transferred as part of a reorganisation, this policy will continue to apply to the information involved.
Third-Party Websites and Tower Rush
Following an outbound link means leaving towerrushplay.app, and the destination site then handles data under its own policies. Any site or message that makes the requests below deserves extra care, because these are common signs of fraud.
| Request | Why it is concerning |
|---|---|
| UPI PIN or banking password | Not required to try a demo |
| OTP | Enables account takeover |
| Card CVV | Unrelated to practice play |
| Remote device access | Exposes accounts |
| Unknown APK | May carry malware |
| Payment for a predictor | A random result cannot be guaranteed |
| Full identity document in chat | Insecure or unnecessary |
Tower Rush Data Retention
We keep information only as long as we need it for the purpose it was collected, or as the law requires. The standard periods below are guidance and may vary where a specific legal or security need applies.
| Data category | Standard retention |
|---|---|
| Uncomplicated contact enquiry | Up to 12 months after the last reply |
| Ongoing complaint or legal matter | Until resolution plus the limitation period |
| Privacy request record | Up to 3 years |
| Routine server logs | Up to 90 days |
| Security-investigation logs | Until the investigation concludes |
| Cookie-consent record | Consent period plus up to 12 months |
| Google Analytics event data | Up to 14 months if enabled |
| Newsletter subscription | Until the subscription is cancelled |
| Suppression record | Minimum needed to honour an opt-out |
| Outbound-link measurement | Up to 12 months |
| Backups | Within about 90 days |
Tower Rush Data Security
We use reasonable technical and organisational measures to protect information, including TLS encryption in transit, access controls, multi-factor authentication for administrative access, software updates and backups. No website can guarantee absolute security, so we cannot promise that a determined attack will never succeed. A few habits help as well.
- A password, OTP, UPI PIN or card CVV is never shared with anyone, including anyone claiming to represent us.
- Only the details needed to answer a question are sent to us.
- A strong, unique password and up-to-date antivirus software protect a device best.
- Unofficial APK files and predictor apps that request unusual permissions are best avoided.
- Anything suspicious can be reported through our contact page so we can look into it.
Tower Rush Privacy Choices and Rights
Subject to applicable law, a request can be made to access the information we hold, to correct or update it, to erase it, to withdraw consent for optional processing, to raise a grievance, and to nominate another person to exercise those rights in the event of death or incapacity. We aim to acknowledge a request within 7 business days and to respond within 30 calendar days, and we will say if more time is genuinely needed. To protect the person making the request, identity may be verified using the information already linked to that request rather than a full identity document.
How to Submit a Tower Rush Privacy Request
A privacy request can be made through our contact page using the subject line Privacy Request. To help us respond, the request should include a name, a reply email address, the type of request, the relevant date or page, and a short explanation of what should be done. No fee is charged for a reasonable request.
Children's Privacy on Tower Rush
Our platform is intended only for adults aged 18 years or older, and it is not directed at children. The DPDP Act defines a child as anyone under 18 years of age, and we do not knowingly collect their personal data. Any belief that a child has provided information through the site should be reported through our contact page so we can remove it.
Tower Rush International Processing
Some service providers we use may process information on servers located outside India. Where that happens, we take reasonable steps so that the information continues to be protected in line with this policy and applicable law, including the framework set by the DPDP Act. We do not transfer personal data to any jurisdiction that is restricted for such transfers under Indian law.
Tower Rush, Do Not Track and Browser Signals
Some browsers can send Do Not Track or global privacy signals. There is no single agreed standard for how websites must respond to them, but where our consent tools recognise such a signal we aim to honour it. Optional cookies can also be managed at any time through our cookie banner and browser settings.
Tower Rush Automated Decisions and Profiling
We do not make decisions that produce legal or similarly significant effects about anyone through solely automated processing, and we do not carry out profiling of that kind. Any analytics we use is aggregate and is not used to evaluate or make judgements about individuals.
Tower Rush Data Breach or Suspicious Activity
Any suspected data exposure, or suspicious activity connected to the site, should be reported through our contact page so that we can investigate. When reporting an issue, sensitive details such as full card numbers, passwords or OTPs should be redacted. Where the law requires it, we will notify the Data Protection Board of India and the individuals affected by a reportable personal-data breach.
Changes to the Tower Rush Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the site, our practices or the law. The version shown here is the current one, and the effective date at the top shows when it was last revised. Continued use of the site after an update means the revised policy is accepted, so the policy is worth checking periodically.
Tower Rush Contact and Grievance Information
For any privacy question, request or grievance, our contact page can be used, and we will route it to the person responsible for handling data matters. When writing to us, include only what is needed to understand the request. A password, one-time password, UPI PIN, card CVV or full identity document should never be included in a message.
18+ only. Tower Rush is a game of chance, not income. India helpline KIRAN (24x7): 1800-599-0019. Set limits and never chase losses.
Tower Rush Game Screens
Real Tower Rush captures, so every visual below shows the actual Galaxsys product rather than a redrawn mock-up.
