bdrumm Privacy Policy

This Privacy Policy ("Policy") describes how bdrumm ("bdrumm", "we", "us", or "the Platform"), the operator of the website located at https://bdrumm.club, collects, uses, stores, discloses, and protects personal information relating to individuals ("Players", "Users", "you") who access or use the bdrumm website, mobile experience, and associated services (collectively, the "Services").

This Policy applies to all personal data collected through the bdrumm Platform, whether provided directly by you during the registration or verification process, gathered automatically through your use of the Services, or received from approved third-party partners such as payment processors and identity verification services.

By registering a bdrumm account, making a deposit, or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must cease using the bdrumm Platform and may request closure of your account by contacting our support team.

bdrumm collects personal data through multiple channels depending on the nature of your interaction with the Platform. The categories of personal data we may collect are set out below.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, mobile number, and account credentials (username and password) provided when you create a bdrumm account.
• Verification documents: Copies of government-issued identity documents (e.g., National Identity Card, passport, driving licence) and proof of address (e.g., utility bill, bank statement) submitted during the Know Your Customer (KYC) verification process.
• Payment data: bKash mobile number, Nagad mobile number, Rocket account details, bank account details, or Visa/Mastercard information provided when making deposits or requesting withdrawals. Full card numbers are not stored by bdrumm; payment data is handled by PCI-DSS compliant payment processors.
• Support communications: The content of messages, emails, and any documentation you send to bdrumm's customer support team in connection with an enquiry, complaint, or dispute.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser version, screen resolution, and hardware identifiers collected when you access the bdrumm Platform.
• Usage and behavioural data: Pages visited, games played, bets placed, session duration, click patterns, navigation paths, and feature interactions recorded during your use of the Platform.
• Transaction data: Records of all deposits, withdrawals, bonus claims, wagers, wins, losses, and balance movements associated with your bdrumm account.
• Cookie and tracking data: Information collected through cookies, pixel tags, and similar technologies as described in Section 6 of this Policy.

2.3 Data Received from Third Parties

• Payment verification: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard to validate deposit and withdrawal transactions.
• Identity verification: Results and risk assessments from third-party KYC and anti-fraud service providers used to verify the identity and age of account holders.
• Responsible gaming data: Self-exclusion records received from recognised responsible gaming registries where bdrumm has integrated with such services.

bdrumm processes your personal data for the following purposes:

bdrumm processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, payment information, and transaction records is necessary to perform the contract between you and bdrumm — that is, to provide you with access to the gaming and betting Services described in our Terms & Conditions.
• Consent: Where bdrumm processes your data for marketing communications or optional features beyond those required to operate your account, we rely on the consent you provide at the time of registration or through your account settings. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legitimate interests: bdrumm processes certain data — including device and usage data — on the basis of legitimate business interests, namely fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our Services. These interests do not override your right to privacy.
• Legal obligation: Where bdrumm is required to process or retain data to comply with applicable anti-money laundering obligations, KYC requirements, or lawful requests from competent authorities, processing is carried out on the basis of legal obligation.

bdrumm does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Personal data may be shared with the following categories of third party strictly on a need-to-know basis and solely to the extent required to deliver or protect the Services:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy and data security obligations.
• Game providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your account identifier and session data necessary to deliver casino games and live dealer services. No additional personal data is transmitted to game providers beyond what is technically required for game session management.
• Identity verification services: Third-party KYC and anti-fraud providers receive copies of identity documents and personal details submitted during the verification process, used solely for the purpose of confirming your identity and age.
• Technology and hosting providers: Cloud infrastructure, database, and security service providers who host and maintain the bdrumm Platform under strict contractual data processing agreements may have access to data as part of their service provision.
• Legal and regulatory authorities: bdrumm may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law, court order, or where bdrumm has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other illegal activity.

bdrumm uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser when you visit the bdrumm website. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting and display options — to provide a more personalised experience across sessions.
• Analytics cookies: bdrumm uses anonymised analytics data to understand how users interact with the Platform, which pages are most visited, and where technical issues occur. This data is used in aggregate form only and is not linked to identifiable individual accounts.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, automated bot access, and other security threats to your account and the Platform.

Most browsers allow you to control cookie settings through their privacy or security preferences. You may choose to block or delete cookies; however, doing so may impair certain features of the bdrumm Platform, including your ability to remain logged in during a session. bdrumm does not use third-party advertising cookies or behavioural tracking cookies for the purpose of delivering targeted advertisements on external websites.

bdrumm retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention principles apply:

• Active account data: Personal data associated with your bdrumm account is retained for the duration that your account remains active and for a reasonable period following account closure to allow for dispute resolution and regulatory compliance.
• Transaction and financial records: Records of deposits, withdrawals, wagers, and account balances are retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable anti-money laundering record-keeping obligations.
• KYC and verification documents: Copies of identity documents submitted during the verification process are retained for the duration of the account relationship and for five (5) years following account closure.
• Support correspondence: Records of customer support interactions are retained for three (3) years from the date of the interaction to support dispute resolution and service quality review.
• Marketing consent records: Records of your marketing consent or opt-out preferences are retained for as long as they remain relevant to your account relationship with bdrumm.

When your personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, bdrumm will securely delete or anonymise it so that it can no longer be linked to you as an individual.

bdrumm implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the bdrumm Platform is encrypted in transit using industry-standard TLS protocols, preventing interception by third parties.
• Password hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. bdrumm staff do not have access to your plain-text password at any time.
• Access controls: Access to personal data within bdrumm's internal systems is restricted to personnel who require it to perform their job functions. All internal access is logged and subject to regular audit.
• Two-factor authentication: bdrumm offers optional OTP-based two-factor authentication for account login, providing an additional layer of protection against unauthorised access to your account.
• Fraud monitoring systems: Automated systems monitor account activity in real time for signs of fraudulent access, unusual transaction patterns, and other security anomalies. Suspicious activity triggers automatic alerts and account protection measures.
• Vendor security assessments: Third-party service providers with access to personal data are subject to contractual security obligations and periodic assessments to verify their compliance with appropriate data protection standards.

As a bdrumm account holder, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address associated with your bdrumm account.

• Right of access: You have the right to request a copy of the personal data bdrumm holds about you, together with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data held by bdrumm is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your bdrumm account settings.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected — you may request that bdrumm delete your personal data. Note that this right may be limited where bdrumm is required to retain data for legal or regulatory compliance purposes.
• Right to restrict processing: You may request that bdrumm restrict its use of your personal data in certain circumstances, for example while a dispute regarding the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where bdrumm processes your data on the basis of consent — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to the processing of your personal data where bdrumm relies on legitimate interests as the legal basis, subject to bdrumm's overriding legitimate grounds for that processing.

bdrumm will respond to all data rights requests within thirty (30) days of receipt. In cases of particular complexity, this period may be extended by a further thirty (30) days, in which case bdrumm will notify you of the extension and the reasons for it.

The bdrumm Platform is strictly intended for adults aged 18 years and above. bdrumm does not knowingly collect, store, or process personal data relating to individuals under the age of 18. Registration by minors is expressly prohibited under our Terms & Conditions.

bdrumm employs age verification procedures during the registration and KYC process to identify and prevent underage access. If bdrumm discovers or has reasonable grounds to believe that an account has been registered by an individual who is under 18 years of age, the account will be immediately suspended, all funds will be withheld pending investigation, and the account will be permanently closed. Personal data collected in connection with such an account will be retained only to the extent necessary to support the investigation and any related legal obligations.

If you are a parent or guardian and believe that a minor has registered a bdrumm account, please contact us immediately at [email protected] so that we can take prompt action.

bdrumm may send you promotional communications — including bonus offers, seasonal promotions, game launch announcements, and platform news — by SMS to your registered mobile number or by email, where you have provided consent to receive such communications during the registration process or through your account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the notification settings section of your bdrumm account;
• Clicking the unsubscribe link included in any marketing email sent by bdrumm; or
• Sending an opt-out request to [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications will not affect your ability to receive transactional and service communications relating to your account, such as deposit confirmations, withdrawal notifications, account security alerts, and changes to these policies. These service communications are sent on the basis of contractual necessity and cannot be disabled while your account remains active.

bdrumm reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, changes to the Services, or updates to applicable law. When material changes are made to this Policy, bdrumm will notify registered account holders via the mobile number or email address associated with their account, and the revised Policy will be published on this page with an updated effective date at the top of the document.

Your continued use of the bdrumm Platform after the publication of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how bdrumm protects your personal information. If you do not agree to a revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy concern, please contact the bdrumm data team using the details below. All requests are handled by our support team, who are available around the clock.

When submitting a data access, rectification, or erasure request, please provide your registered mobile number and a brief description of the data concerned to enable us to locate your records and respond accurately and efficiently.