What Does Tower Do With Your Data? Privacy Policy
See what personal data Tower collects at signup and in the cashier, who can see it, and how to access, fix or delete your info or opt out of marketing.
Your data
Your Data at Tower: Used to Pay You, Never Sold
We collect only what it takes to verify you, pay you and keep every round honest. Contact-form messages are wiped after 180 days.
Tower Online Casino collects three kinds of data: what you type in at signup and in the cashier, what the platform logs while you play, and what you send through the contact form. Each piece has a job. It proves you are 18+, gets a payout to the right account or catches someone farming one welcome package across five accounts. For players in Australia, the Tower privacy policy follows the Privacy Act 1988 and the Australian Privacy Principles in general terms, and none of this data is sold.
What you type in at signup and in the cashier
Your name, date of birth and address have to match your ID, or the payout waits. At registration we take your name, date of birth, residential address, email and phone number. The cashier adds payment method details, and at some point it asks for KYC documents such as photo ID and proof of address. In practice it plays out like this: you deposit A$30 by card, clear the x35 turnover, then ask to cash out to a different method, and a verification request reaches you before the money does. Plan for it.
What the platform logs while you spin
IP address, device and session logs serve fraud checks and keep the pokies lobby loading. We record device type, browser, session times, game rounds, bet history and bonus activity, plus cookies that hold your login and settings. Bet history shows round by round when someone bets over the A$8 max while a bonus is active. The same records also stop one person running several packages from a shared device. Account and transaction data stays for a standard retention period required by law, and the contact details on this site are where to ask for specifics.
Who we share it with, and who never gets it
Only the parties needed to pay you, verify you and run the game. Payment processors see what a deposit or withdrawal needs. KYC providers see your documents. Game studios get the minimum to run a round on their servers: an account reference and the bet, not your name or home address. Regulators and law enforcement receive data only when the law requires it. Nobody buys it from us.
Messages sent through the contact form
A form message goes to a separate processor, and this site keeps no copy once it is delivered. Your name, email, subject and message text are passed to the operator of the network of sites this one belongs to. That operator is a separate entity acting as data processor and uses them only to handle your message and reply to it.
The form sends only after you tick the consent box. It accepts no attachments, and links and contact details inside your text are hidden automatically for security. Your IP address is not stored. Only an irreversible hash of it is kept, and only to block abuse.
Messages are kept for up to 180 days. After that your name, email and text are deleted, and only anonymised stats remain: subject, language and date.
To see what we hold about you, or to have it erased, send a message through the same form with the subject "Privacy / data request".
- Name, date of birth, address and ID are checked so a payout lands with the right person, and a switch of withdrawal method triggers verification.
- Bet history and session logs are how a spin above the A$8 max bet on an active bonus gets flagged.
- Game studios get only what a round needs, and your data is never sold.
- Contact-form messages need ticked consent, take no attachments and lose name, email and text after 180 days.
Next step
Details Handled, the Tower Pokies Lobby Is Open
Now you know where your details go. The Tower Casino pokies lobby is one tap away whenever you feel like a few spins. No rush.
Form messages are deleted after 180 days, and only a one-way hash of your IP is kept.
Your rights
Ask, Fix or Erase Your Tower Data
One contact-form message with the topic Privacy / data request shows what we hold or starts erasure. Form messages themselves go after 180 days.
Getting a copy or getting deleted
Any player can see, correct or delete their details, and it starts with one message. Say you've closed your account and want your details gone. Write through the contact form with the topic Privacy / data request, give the email the account was registered with, and ask either what we store or for erasure. Some records stay anyway.
Identity checks, deposit and withdrawal history and anti-money-laundering files have to be kept for as long as the law requires, so erasure covers everything outside that. A wrong address or a misspelled name gets fixed the same way. Verified ID details may need a fresh document before they change. Support can take the request too, and both routes land in the same place.
Where a form message goes
- Who reads it
- A separate processor handles it, the site keeps nothing after delivery
- Network operator
- Why
- Only to review your message and reply
- Your IP
- Not stored, just an irreversible hash against abuse
- Hash only
- Attachments
- Text only, so no ID scans through the form
- Not accepted
- Links and contacts
- Masked automatically in the message for security
- Hidden
- Kept for
- Then your name, email and text are deleted
- 180 days
- What remains
- Topic, language and date, with nothing tied to you
- Stats
- Consent
- Tick the box in the form before sending
- Required
Cookies, promo mail, closing up
Marketing is optional. Account messages aren't. You can clear or block cookies in your browser settings, and you can unsubscribe from promo emails or SMS at any time through the link in the message or by asking support. Opting out stops offers like the Sunday Free Spins reminders, while cashier confirmations, verification requests and account notices keep arriving because they concern your money.
Closing the account or switching on self-exclusion stops play. It doesn't wipe the compliance file. The part of your tower account data tied to ID checks and payment history stays archived for as long as regulation requires.
Use a password for your Tower login that you use nowhere else, don't share the device you play on, and log out every time on a borrowed phone. Three habits, nothing more.
Security and how to reach us
The basics are covered on our side. Connections to the site are encrypted, staff access to player records is limited to those who need it for verification or payouts, and card and bank payments go through payment processors. Questions about your data go through the contact form with the Privacy / data request topic or through support.
This policy applies to players from Australia and elsewhere. We may update it, and the date of the latest revision is shown on this page.
Choose the Privacy / data request topic