Privacy Policy

Welcome. This Privacy Policy explains how we ("we", "our") collect, use, disclose and protect personal information when you visit or create an account with Tower Casino. It also explains your choices and rights related to your personal data. Please read this Policy carefully. By using our services you consent to the practices described here, where applicable under law.

Information we collect

We collect personal data you provide directly and information collected automatically when you use our site and services.

Account information: name, email address, username, password, date of birth and other information you supply when you register.
Identity and verification data: documents and details submitted to verify identity, address or to meet legal or regulatory requirements.
Communications: messages you send to our support team, survey responses and marketing preferences.
Usage and technical data: IP address, device identifiers, browser and operating system, pages viewed, referring URL, timestamps and other diagnostic data collected automatically.
Preferences and settings: language, display preferences and other choices you set in your account.
Responsible-play and safety data: information related to account limits, interactions with support about play habits, and any self-exclusion or time-out requests.

How we use your information

To create and manage your account and provide our services.
To verify identity and prevent fraud, abuse and other security risks.
To comply with legal and regulatory obligations.
To respond to your inquiries, provide customer support and resolve disputes.
To personalize your experience and provide content and features tailored to you.
To operate, maintain and improve our website and services, including analytics and testing.
To communicate with you about updates, offers and promotions where you have consented or we otherwise have a lawful basis.
To support responsible-play measures and process requests related to account limits, time-outs and self-exclusion.

Legal bases for processing (including GDPR)

Where applicable, we rely on one or more of the following legal bases to process your personal data:

Performance of a contract: processing necessary to provide the services you have requested.
Legal obligation: processing necessary to comply with laws and regulatory requirements.
Legitimate interests: processing for fraud prevention, security, administration, service improvement and direct marketing where those interests are not overridden by your rights.
Consent: where we request your consent for marketing, cookies or other optional processing, and you have given it.

Cookies and similar technologies

We use cookies and similar tracking technologies to operate the site, remember preferences, analyze usage and deliver relevant content. Cookies fall into categories such as:

Essential cookies needed for core site functions.
Performance and analytics cookies to measure and improve site performance.
Functional cookies to remember preferences and settings.
Advertising or targeting cookies to deliver more relevant communications (where permitted).

You can manage cookie preferences through your browser settings and any cookie controls we provide. Withdrawing consent for non-essential cookies may affect certain features.

Sharing your information

We may share personal data in limited circumstances and always with appropriate safeguards:

Service providers: third parties who perform services on our behalf, such as hosting, analytics, technical support and communications.
Safety and fraud prevention: parties that help detect and prevent fraud, abuse or other illegal activity.
Legal and regulatory disclosures: where required by law, regulation or to respond to lawful requests by public authorities.
Business transfers: in the event of a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, subject to protections.
Affiliates and partners: where necessary to provide the services you request or with your consent.

International data transfers

Your personal data may be transferred to, processed and stored in countries outside your home jurisdiction. When we transfer data internationally, we implement appropriate safeguards such as contractual protections or other measures required by applicable law to help protect your information.

Data security

We take reasonable technical and organisational measures to protect personal data against loss, unauthorized access, disclosure, alteration and destruction. These measures include access controls, encryption, monitoring and staff training. No system can be completely secure, so we encourage you to protect your account credentials and notify us promptly of any suspected breach.

Data retention

We retain personal data only as long as necessary for the purposes described in this Policy, and to satisfy legal, accounting, or reporting requirements, resolve disputes and enforce agreements. Account information is retained while your account is active and for a limited period after account closure as required by law or to meet legitimate business needs, including fraud prevention and dispute resolution.

Your rights and choices

Depending on your location and applicable law, you may have rights regarding your personal data, including:

The right to access the personal data we hold about you.
The right to request correction of inaccurate data.
The right to request deletion of personal data, subject to legal and contractual obligations.
The right to restrict or object to certain processing, including direct marketing.
The right to data portability in certain circumstances.
The right to withdraw consent where processing is based on consent.

To exercise these rights, contact us at the email address below. We may ask for information to verify your identity before fulfilling requests. Where we cannot comply with a request, we will explain the reasons.

Automated decision-making and profiling

We may use automated tools to help with account risk assessment, fraud prevention and to personalize your experience. These processes may involve profiling based on your activity. Where you have rights under applicable law, you may request human review and contest automated decisions that significantly affect you.

Children and age limits

We do not knowingly collect personal data from persons under the minimum age required to use our services. If we become aware that we have collected data from someone below the minimum age, we will take steps to delete that information. If you believe a child has provided us with personal data, please contact us.

Responsible-play and safety requests

If you request responsible-play measures such as time-outs, account closures or self-exclusion, we will process the personal data necessary to implement and record those requests. These measures may be implemented to protect your account and support your request.

Changes to this Privacy Policy

We may update this Policy from time to time. When we make material changes, we will notify you by posting the updated Policy on our site and indicating the effective date. Continued use of our services after changes are posted constitutes acceptance of the revised Policy.