Privacy Policy — bdrummey

When you interact with bdrummey — whether by visiting the website, registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal data. The specific data collected depends on the nature of your interaction with the platform.

1.1 Registration and Account Data

When you create a bdrummey account, we collect the information you provide during the registration process, including:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other Bangladeshi cities) and postal code.
• Email address and mobile phone number.
• Username and encrypted password (passwords are never stored in plain text).
• Your preferred currency (Bangladeshi Taka, BDT) and language settings.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to verify your age and identity, we may collect:

• Copies of government-issued photo identification (National ID card, passport, or driving licence).
• Proof of address documents (utility bill, bank statement, or similar).
• Selfie photographs or video verification clips where requested.
• Documentation verifying ownership of the payment method (bKash, Nagad, Rocket, Upay, or bank account) linked to your bdrummey account.

1.3 Financial Transaction Data

Each time you make a deposit or request a withdrawal, bdrummey records transaction details including the payment method used, transaction amount in BDT, transaction timestamp, and a transaction reference identifier. We do not store full mobile banking PIN codes or full bank account numbers. Only the minimum payment details necessary to process and reconcile your transactions are retained.

1.4 Gameplay and Activity Data

To operate the platform, detect fraud, and provide a personalised experience, bdrummey collects data about your platform activity, including:

• Games played, bet amounts, wagering history, win and loss records.
• Sports betting selections, odds accepted, and settlement outcomes.
• Session start and end times, total session duration.
• Bonus claims, wagering progress against bonus requirements, and reward redemptions.

1.5 Technical and Device Data

When you access bdrummey, our servers and analytics systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited. This data is used for security monitoring, fraud prevention, platform optimisation, and aggregate statistical analysis. It does not, on its own, identify you as a specific individual without being combined with account data.

1.6 Communications Data

If you contact bdrummey via live chat, email, or any other support channel, we retain records of that communication, including the content of your message, the date and time of contact, and the resolution provided. These records are used for quality assurance, dispute resolution, and to improve our support services.

bdrummey processes your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which bdrummey processes personal data are as follows:

Automated Decision-Making: bdrummey uses automated systems to monitor for suspicious activity, potential bonus abuse, and responsible gaming risk indicators. Where an automated process results in a significant decision affecting your account (such as a withdrawal hold or account flag), you have the right to request human review of that decision by contacting our support team.

Personalisation: With your consent, bdrummey may use your gameplay history and preferences to personalise the games, promotions, and content displayed to you on the platform. You may withdraw this consent at any time through your account settings.

In the course of operating the bdrummey platform, your personal data may be shared with certain categories of third parties under controlled conditions. All third-party recipients are contractually obligated to process your data only for the purpose for which it was shared and to maintain appropriate security standards.

3.1 Game Technology Providers

bdrummey hosts games developed and operated by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game from one of these providers, your gameplay session data (such as bet amounts and game outcomes) may be processed by the relevant provider's systems to power the game and generate results. This data sharing is essential to the delivery of the gaming service and cannot be avoided without foregoing access to those games.

3.2 Payment Processing Partners

To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or other approved payment channels, bdrummey shares the minimum necessary transaction data with the relevant payment provider. This may include your registered mobile number, transaction amount, and a bdrummey transaction reference. Payment providers are bound by their own privacy policies and applicable financial regulations in Bangladesh.

3.3 Identity Verification Services

bdrummey may use trusted third-party identity verification services to assist with KYC processing. These services receive KYC documents only for the purpose of verifying their authenticity and confirming your identity. They are prohibited from using this data for any other purpose.

3.4 Legal and Regulatory Disclosure

bdrummey may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected criminal activity including fraud and money laundering. Such disclosures are made on a case-by-case basis and limited to the data specifically requested.

3.5 Business Transfers

In the event that bdrummey undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy practices of the new operator prior to any change in how their data is processed.

bdrummey uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and analyse how players interact with the site. This section explains what cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and retrieve stored preferences or session information. Cookies do not contain executable code and cannot access other files on your device.

4.2 Types of Cookies Used by bdrummey

4.3 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential to the functioning of the bdrummey platform. For all other cookie categories, you may manage your preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the browser's privacy or settings menu. Please be aware that disabling functional or analytics cookies may affect your experience on the platform.

bdrummey takes the security of your personal and financial data seriously. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

Key security measures in place at bdrummey include:

• SSL/TLS Encryption: All data in transit between your device and bdrummey servers is encrypted using current TLS protocols. The padlock icon visible in your browser address bar confirms an active encrypted connection.
• Password Hashing: Account passwords are never stored in plain text. bdrummey uses industry-standard one-way hashing algorithms to store password credentials securely.
• Access Controls: Internal access to player data is restricted on a strict need-to-know basis. Staff members can only access the data categories required for their specific role.
• Two-Factor Authentication: bdrummey offers optional two-factor authentication (2FA) for player accounts, adding an extra layer of protection beyond your password.
• Fraud Monitoring: Automated systems continuously monitor account activity for patterns indicative of unauthorised access, unusual transaction behaviour, or account takeover attempts.
• Penetration Testing: bdrummey engages independent security professionals to conduct periodic penetration testing of the platform's systems and infrastructure.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to your rights, bdrummey will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

While bdrummey implements robust security measures, no system can guarantee absolute security. Players are encouraged to use a strong, unique password for their bdrummey account, to avoid sharing login credentials, and to notify bdrummey support immediately if they suspect unauthorised access to their account.

As a player on bdrummey, you hold a set of rights with respect to the personal data we hold about you. bdrummey respects these rights and has processes in place to handle requests promptly and transparently. To exercise any of the rights described below, contact our support team via live chat or email at support@bdrummey.

• Right of Access: You have the right to request a copy of the personal data that bdrummey holds about you, along with information about how it is being used. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account details such as your email address and phone number can be updated directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data. This right is subject to legal retention obligations — for example, financial transaction records must be retained for a defined statutory period. Where erasure is not possible in full, we will delete the maximum amount of data permissible and explain what must be retained and why.
• Right to Restrict Processing: In certain circumstances (for example, while a dispute about data accuracy is being resolved), you may request that bdrummey temporarily restrict the processing of your personal data.
• Right to Data Portability: You may request that bdrummey provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where it is based on bdrummey's legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where bdrummey processes your data based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bdrummey retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once data is no longer required, it is securely deleted or anonymised in accordance with our internal data retention schedule.

The following general retention periods apply to the main categories of personal data held by bdrummey:

• Account registration data: Retained for the duration of your account and for a period of 5 years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification, as required under applicable financial regulations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Gameplay and betting history: Retained for a period of 3 years following account closure, for dispute resolution and responsible gaming audit purposes.
• Customer support communications: Retained for 2 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and device data: Retained in anonymised or aggregated form for up to 13 months for analytics purposes.
• Marketing consent records: Retained for the duration of your consent, plus 2 years after withdrawal, as evidence of consent management.

Upon expiry of the applicable retention period, data is deleted from active systems and backups in accordance with bdrummey's secure deletion procedures. Where complete deletion is not technically feasible within backup cycles, the data is rendered inaccessible pending its natural expiry from backup storage.

bdrummey reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When we make material changes to this policy, we will notify registered players via email to their registered address and display a prominent notice on the bdrummey platform for a period of at least 14 days following the update.

Minor updates — such as corrections to typographical errors, clarifications that do not alter the substance of the policy, or changes to our contact details — may be made without individual notification. The "Last Reviewed" date at the top of this page will always reflect when the most recent version was published.

Your continued use of bdrummey following publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you disagree with any changes to this policy, you should discontinue use of the platform and may request account closure via the support team. bdrummey will process any outstanding withdrawal requests in accordance with these Terms before closing the account.

For any questions about this Privacy Policy, or to exercise any of the data rights described in Section 6, please contact the bdrummey privacy team at support@bdrummey or through the 24/7 live chat on the platform. Our support team operates on Bangladesh Standard Time (BST, UTC+6) and is available around the clock.