bdrumm Privacy Policy

bdrumm uses the personal data we collect for the following core purposes:

• To create, verify, and manage your bdrumm account, including identity verification to confirm you meet the 21+ age requirement.
• To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records for each transaction.
• To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and abuse of the bdrumm bonus system.
• To provide personalised customer support through our live chat and email channels.
• To send transactional notifications, account alerts, and — where you have opted in — promotional communications about bdrumm offers and events.
• To monitor gaming behaviour patterns in order to identify signs of problem gambling and to apply responsible gaming tools where appropriate.
• To improve platform performance, user experience, and game content based on aggregate analytics data.

bdrumm will not use your personal data for any purpose that is incompatible with those listed above without obtaining your explicit prior consent.

bdrumm does not sell your personal data. We may share limited personal data with the following categories of trusted third-party service providers, strictly for the purposes described:

• Payment processors (bKash, Nagad, Rocket, Upay) — to execute deposit and withdrawal transactions on your behalf.
• Identity verification providers — to conduct KYC checks in compliance with our anti-fraud and age verification obligations.
• Game software providers (including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi) — to deliver and record game rounds securely. These providers operate under their own privacy and data protection policies.
• IT infrastructure and cloud hosting providers — to store and process platform data securely on servers protected by industry-standard physical and digital security controls.
• Analytics tools — to process anonymised or aggregated usage data for platform improvement purposes only.

All third-party partners are contractually bound to process your data only as instructed by bdrumm and in accordance with applicable privacy standards. They are prohibited from using your data for their own independent purposes.

bdrumm uses cookies, web beacons, and similar local storage technologies to operate the platform effectively. The types of cookies we use are:

• Strictly necessary cookies — required for core platform functionality such as maintaining your logged-in session and remembering your account preferences.
• Performance and analytics cookies — used to collect anonymised data about how users navigate the bdrumm platform so we can identify and fix performance issues.
• Functionality cookies — used to remember your preferences such as preferred language (English) and display settings.

bdrumm does not deploy third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted ads across other websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the bdrumm platform.

bdrumm retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and regulatory obligations. Specific retention periods are as follows:

• Account and identity data — retained for the duration of your account plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs — retained for a minimum of three (3) years from the date of each session.
• Support correspondence — retained for two (2) years from the date of last contact, unless the matter remains subject to an ongoing dispute.
• Technical/device data — retained for up to twelve (12) months, after which it is anonymised or deleted.

Once the applicable retention period expires, your data is securely deleted or permanently anonymised so that it can no longer be associated with you as an individual.

As a user of the bdrumm platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and the specific right you wish to exercise.

• Right of access — you may request a copy of all personal data bdrumm holds about you.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction — you may request that we restrict the processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to object — you may object to processing of your data where bdrumm relies on legitimate interests as the legal basis, unless we can demonstrate compelling grounds for processing.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bdrumm will respond to all valid data rights requests within 30 days of receipt. In cases of complexity or high volume, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

bdrumm employs a layered approach to information security designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and bdrumm servers.
• Encrypted storage of sensitive data, including identity documents and payment method details, using AES-256 encryption at rest.
• Two-factor authentication (2FA) options for user accounts to provide an additional layer of login security.
• Role-based access controls ensuring that bdrumm staff can only access personal data that is strictly necessary for their job function.
• Regular automated and manual security audits, penetration testing, and vulnerability assessments.
• Strict third-party vendor assessment procedures to ensure all data processors maintain equivalent security standards.

While bdrumm takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, bdrumm will notify affected users without undue delay.

bdrumm may send you promotional communications about new games, seasonal bonuses (for example, Eid specials, Pohela Boishakh promotions, or BPL cricket offers), and platform updates, provided you have opted in to receive such communications during registration or through your account settings.

You may unsubscribe from marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe". Opting out of marketing communications will not affect transactional notifications, which are necessary for the operation of your account.

The bdrumm platform is strictly restricted to individuals aged 21 years and above. bdrumm does not knowingly collect personal data from anyone under the age of 21. If we become aware that a user account was created by a person under 21, the account will be immediately suspended, all data associated with it will be reviewed, and winnings will be forfeited in accordance with our Terms and Conditions.

If you believe a minor has registered an account on bdrumm, please contact us immediately at [email protected] so that we can take appropriate action.

bdrumm reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes significantly affect your rights or how we use your data, we will notify you via email or a prominent notice on the bdrumm platform.

Your continued use of the bdrumm platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bdrumm handles your personal data, please contact our dedicated privacy support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 5 business days for general enquiries; within 30 days for formal data rights requests.
• Language: All correspondence handled in English.
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6).