bdrumy Privacy Policy

1 Who We Are and How to Contact Us

1.1 The bdrumy platform is operated by bdrumy and is accessible at bdrumy.app. For the purposes of this Privacy Policy, bdrumy acts as the data controller with respect to the personal data of its registered players.

1.2 If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response time: bdrumy aims to acknowledge data-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to respond substantively within 14 calendar days.

2 Legal Basis for Processing Personal Data

2.1 bdrumy processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your player account, process deposits and withdrawals, and deliver the services described in our Terms & Conditions;
• Legal obligation: Processing required to comply with applicable laws, including age verification, anti-money-laundering (AML) obligations, and fraud prevention requirements;
• Legitimate interests: Processing for purposes of fraud detection, platform security, responsible gaming monitoring, and improvement of platform services, where such interests are not overridden by your rights;
• Consent: Processing for marketing communications, where you have provided explicit, freely given, and revocable consent.

2.2 Where processing is based on consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

3 How We Use Your Personal Data

3.1 bdrumy uses the personal data it collects for the following purposes:

• Creating, maintaining, and administering your player account;
• Verifying your age and identity in compliance with our responsible gaming and anti-fraud obligations;
• Processing deposits, withdrawals, and other financial transactions via Approved Payment Methods (bKash, Nagad, Rocket, Upay, USDT);
• Providing customer support and responding to queries, complaints, and responsible gaming requests;
• Sending account-related notifications (e.g., transaction confirmations, security alerts, verification requests);
• Monitoring gaming activity for signs of problem gambling and enforcing responsible gaming tools where appropriate;
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited conduct;
• Improving the bdrumy platform through analysis of aggregated and anonymised usage data;
• Sending promotional communications where you have provided consent to receive them.

3.2 bdrumy does not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human oversight, except where such processing is required by law or has been consented to by you.

4 Sharing of Personal Data with Third Parties

4.1 bdrumy may share your personal data with the following categories of third parties, strictly for the purposes identified in this Privacy Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, and USDT network operators, solely for the purpose of processing financial transactions on your behalf;
• Game providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, to the extent necessary to deliver their games via the bdrumy platform;
• Identity verification and fraud prevention services: Third-party providers used to verify player identity and detect prohibited conduct;
• IT and infrastructure providers: Hosting, cloud storage, and cybersecurity service providers who process data on bdrumy's behalf under strict contractual data protection obligations;
• Legal and regulatory authorities: Where bdrumy is required by law, court order, or regulatory instruction to disclose personal data.

4.2 All third-party service providers who process personal data on behalf of bdrumy are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for their own independent purposes.

4.3 bdrumy does not transfer personal data to countries outside of its operational jurisdiction unless adequate data protection safeguards are in place, such as contractual data protection clauses equivalent to applicable standards.

5 Cookies and Tracking Technologies

5.1 bdrumy uses cookies and similar tracking technologies on the bdrumy.app platform for the following purposes:

• Essential cookies: Required for the platform to function correctly, including session management and login state persistence. These cannot be disabled without impairing platform functionality;
• Analytics cookies: Used to collect anonymised data on how players interact with the platform, enabling bdrumy to identify areas for improvement;
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised account access, and bot-driven interactions;
• Preference cookies: Used to remember your platform settings and preferences between sessions.

5.2 You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the availability or functionality of some features on the bdrumy platform.

6 Data Retention

6.1 bdrumy retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Active account data: Retained for the duration of your registered account on the bdrumy platform;
• Transaction and financial records: Retained for a minimum of five (5) years following the transaction date, in accordance with applicable financial record-keeping obligations;
• Identity verification documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later;
• Support and communications records: Retained for a minimum of two (2) years following the closure of the relevant support case;
• Marketing consent records: Retained for the duration of your consent and for one (1) year following its withdrawal, as evidence of the consent history.

6.2 Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised, unless retention is required by law.

7 Your Rights as a Data Subject

7.1 As a player on the bdrumy platform, you hold the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data bdrumy holds about you;
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations;
• Right to restriction of processing: You may request that bdrumy limit how it uses your personal data in certain circumstances;
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that your data be provided to you in a structured, commonly used, and machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7.2 To exercise any of the above rights, please submit a written request to [email protected]. bdrumy will respond within 14 calendar days of receiving a valid request. We may need to verify your identity before processing your request.

7.3 bdrumy will not charge a fee for responding to routine data subject requests. Where a request is manifestly unfounded or excessive, bdrumy reserves the right to charge a reasonable administrative fee or to decline the request, with written reasons provided.

8 Security Measures

8.1 bdrumy implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the bdrumy platform;
• Encrypted storage of sensitive data fields, including payment information and authentication credentials;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Regular security assessments and vulnerability testing of platform infrastructure;
• Automated fraud detection and anomaly monitoring systems operating in real time.

8.2 While bdrumy takes reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying bdrumy promptly at [email protected] if you suspect any unauthorised access to your account.

9 Children and Minors

9.1 The bdrumy platform is strictly intended for individuals aged 21 years and above. bdrumy does not knowingly collect personal data from individuals under the age of 21.

9.2 If bdrumy becomes aware that personal data has been collected from a person under the age of 21, it will take prompt steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the bdrumy platform, please notify us immediately at [email protected].

10 Changes to This Privacy Policy

10.1 bdrumy reserves the right to update or amend this Privacy Policy at any time. Updated versions will be published on the bdrumy.app platform with a revised effective date. Material changes to how bdrumy processes personal data will be communicated to registered players via account notification or email where practicable.

10.2 Your continued use of the bdrumy platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you must cease use of the platform and request account closure.