Privacy Policy

When you sign in with Steam, we receive your public Steam profile information including your Steam ID, display name, and avatar. This is used to create and maintain your RustRush account.

If you choose to verify your email address, we store your email for account security and communication purposes.

We automatically collect usage data including pages visited, games played, transaction history, IP addresses, browser type, and device information. This data helps us improve the platform and ensure fair play.

We may collect additional information if you contact our support team or use our support assistant, such as the content of your messages and any attachments you provide.

To provide, maintain, and improve our services and your experience on the platform.

To process transactions, manage your account, and provide customer support.

To ensure fair play, detect fraud, and enforce our terms of service and platform rules.

To communicate important updates about your account, the platform, or changes to our policies.

To generate aggregated, anonymized analytics that help us understand usage patterns and improve the platform. This data cannot be used to identify individual users.

If you choose offer and promotion emails, to send you occasional emails about deposit offers and promotions. This is separate from reward reminders, and you can turn it off at any time.

We do not sell your personal information to third parties.

If you join through another player's referral link or code, that player can see limited information about you, as described in section 9.

We may share data with trusted service providers who assist in operating the platform (e.g., hosting, analytics, payment processing, and the AI provider behind our support assistant, described in section 11). These providers are contractually obligated to protect your data.

We may disclose information if required by law, regulation, legal process, or governmental request.

In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. You will be notified of any such change.

We use cookies and similar technologies to maintain your session, remember your preferences, and collect usage analytics.

Essential cookies are required for the platform to function properly (authentication, session management).

Analytics cookies help us understand how the platform is used and identify areas for improvement. These can be disabled in your browser settings, though some features may not work correctly.

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), secure authentication protocols, and access controls.

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

If we become aware of a data breach that may affect your personal information, we will notify you in accordance with applicable laws.

We retain your personal data for as long as your account is active or as needed to provide services to you.

If you request account deletion, we will remove your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytical purposes.

If a deposit trade is reversed or rolled back, we keep the identifiers linked to it (Steam account, trade link, device, network (a hash of the IP address), browser fingerprint, crypto payout address and email) on a block list for as long as the ban lasts, so they cannot be used again.

Support assistant chats and the records kept about them have their own retention periods, described in section 11.

You have the right to access the personal data we hold about you. Contact our support team to request a copy.

You may request correction of inaccurate information or deletion of your personal data, subject to legal requirements and legitimate business needs.

You may withdraw consent for non-essential data processing at any time by adjusting your preferences or contacting support.

If you are located in the EU/EEA, you have additional rights under the GDPR including data portability and the right to lodge a complaint with a supervisory authority.

Where we rely on our legitimate interests, you may object to that processing by contacting support.

RustRush is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.

If we learn that we have collected personal information from a user under 18, we will take steps to delete that information and terminate the associated account.

If you join RustRush through another player's referral link or code, that player (your inviter) can see on their Refer & earn page: your username and avatar, or "Private player" with no avatar if your profile is set to private; when you joined and whether you used their link or their code; whether you have deposited; and the status and amount of the referral reward your deposit earned them. Because that reward is a share of your first deposit, its amount can show roughly how much that deposit was. Your inviter also earns a share of the house edge on your coin play; it is added to their reward totals, so those totals can reflect how much you play. They cannot see your balance or your individual bets.

If you share your own referral link or code, the people who open your link or use your code see your username as the person who invited them, unless your profile is set to private. You can make your profile private at any time on your profile page. Your code itself is always visible to the people you share it with, and the code we suggest is based on your username, so pick a different code if you do not want it to show your name.

When you sign up through an invite link, or enter a referral code on the Refer & earn page or in the deposit window, we tell you that the person whose link or code you use gets a reward if you deposit. This section lists everything they can see, and the Referral Rules at /referral-rules explain how the program works.

To create a referral link or code, we ask once for your date of birth if your account does not already have one. We store it on your account and use it only to check that you are 18 or older. Once stored, it cannot be changed on the site; contact support if it is wrong.

If the date you enter shows you are under 18, we do not store it. We keep a record that an under-18 date was entered, this account can no longer create a referral link or code, and our team is notified to review the account under section 8.

To stop people rewarding their own accounts, we check referral rewards for linked accounts. We compare the device, browser and IP address information described in section 1 for the inviter and the invited player, together with any multi-account flags, the withdrawal details both accounts use (such as crypto addresses and Steam accounts), and whether the invited player's Steam account is public and how old it is. Our team may review this information before a referral reward is paid.

The reward for a first deposit also needs an adult date of birth on file for both the inviter and the invited player, and it waits for review while one is missing. If the invited player's date of birth shows they are under 18, that reward is cancelled and our team is notified to review the account under section 8.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

We encourage you to review this policy periodically to stay informed about how we protect your data.

RustRush has an optional support assistant that answers questions using AI. It runs on Claude, an AI model made by Anthropic. When you use it, we send the information it needs to answer you to Anthropic Ireland, Limited, which processes it for us as our data processor, to provide and maintain the service and on our instructions, except where the law requires otherwise, under Anthropic's Commercial Terms of Service and Data Processing Addendum.

What we send: the messages you type to the assistant, your earlier messages and the assistant's answers in the same chat, the parts of our help pages that match your question, and which language and site you are using. We do not send your Steam ID, display name, email address or IP address with it.

If you are signed in, the assistant can also look up your own account through read-only tools and send what it finds to Anthropic to write its answer: your balances, account level and recorded unclaimed rakeback; your deposits and withdrawals and their references, amounts, dates and status; whether withdrawals are paused or under review and any known review end date; your wagering progress; your responsible-play limits and scheduled change dates; and the subjects, dates and status of your support tickets. It cannot change anything on your account and cannot look up anyone else's account. If you are not signed in, it has no access to any account data.

Before your messages are stored or sent, we automatically remove email addresses, phone numbers, Steam trade links and crypto wallet addresses that we detect. Please do not type passwords, payment details or information about your health into the chat.

Our support staff can also ask the assistant to suggest a reply to a support ticket. For that, we send the ticket's messages, including any email replies and any assistant chat attached to it, to Anthropic. A staff member reads every suggestion and decides what to send. The assistant never replies to a ticket on its own.

Anthropic's Commercial Terms of Service do not allow it to train its models on the content we send it, and we have not opted in to any Anthropic program that would allow this.

Anthropic deletes this content within 30 days. It may keep it longer where the law requires or where needed to enforce Anthropic's Usage Policy, and if its automated safety systems flag a request as breaking that policy, it may keep that content for up to 2 years and the related safety scores for up to 7 years.

Anthropic stores this data in the United States and may process it in other countries, including countries in Europe, Asia and Australia. Where data protection law requires it, these transfers are covered by the European Commission's Standard Contractual Clauses, with the UK and Swiss addenda, which are part of Anthropic's Data Processing Addendum. Anthropic publishes the list of sub-processors it uses on its website.

We delete assistant chats 30 days after your last message in them. If you ask to reach a person and we open a ticket for you, a copy of the chat is attached to that ticket and kept with it like the rest of the ticket. Our staff can read assistant chats to check answers, investigate abuse and identify common questions that could help us improve the site. Authorized administrators can view reports and download redacted questions for these purposes.

For each answer we also keep a usage record for 90 days: when it happened, what it cost, how it ended and a keyed hash of your IP address, with no message content. We use these records to cap costs and stop abuse.

Only signed-in users can use the assistant. Attempts to obtain secrets, override its instructions or use it outside support receive a warning; a further attempt blocks access to the assistant. Human support remains available. We keep the warning or block on your account, including its date, reason category and hashes used to identify repeated requests. This enforcement record remains until the account is deleted or the site owner resets it after review; deleting a chat does not reset it. Separately, we keep a bounded, automatically redacted copy of the message that caused each warning or block for up to 30 days so authorized administrators can review the decision. Requests after a block do not add more copies. These message copies are removed by an assistant-data deletion request or an owner reset.

We use the assistant because we have a legitimate interest in answering support questions quickly. You can object at any time by contacting us, and you can always use the contact form instead.

The assistant is optional. You can always reach a person through the contact form or at support@caserush.gg instead.

To get a copy of your assistant chats, or to have them deleted before the 30 days are up, contact us at support@caserush.gg. Deleting them does not recall what was already sent to Anthropic, which is deleted on Anthropic's schedule described above. The usage records described above contain no messages and are kept until they expire, as our record of what the service cost.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@caserush.gg.