At bdrumy, the privacy and security of your personal data is a fundamental obligation — not an afterthought. This Privacy Policy explains exactly what data we collect, how we use it, who we share it with, and what rights you hold as a registered player on our platform.
1.1 This Privacy Policy ("Policy") is published by bdrumy ("bdrumy", "we", "us", "our") and applies to all registered players, visitors, and users ("you", "your") of the bdrumy online betting and casino platform, accessible at bdrumy.net.
1.2 bdrumy is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy describes the categories of personal data we process, the purposes for which we process it, the lawful bases we rely on, and the rights available to you.
1.3 By registering an account, making a deposit, placing a bet, or otherwise using the bdrumy platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision of this Policy, you must discontinue use of the platform.
1.4 This Policy should be read alongside bdrumy's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between bdrumy and registered players.
1.5 This Policy is written in English. In the event of any inconsistency arising from translation, the English-language version shall prevail.
2.1 For the purposes of applicable data protection law, bdrumy acts as the data controller in respect of personal data collected from players who use the bdrumy platform. As data controller, bdrumy determines the purposes and means of processing your personal data.
2.2 bdrumy operates as an offshore platform serving players primarily located in Bangladesh. All data processing activities described in this Policy are carried out by bdrumy's operating entity and its authorised processors.
2.3 For all data-related queries, requests, or complaints, you may contact bdrumy's data team at: [email protected] (plain text — not a clickable link). Correspondence should include your registered username and a clear description of your request.
3.1 bdrumy collects the following categories of personal data from players and platform visitors:
4.1 Directly from you: The majority of personal data bdrumy holds about you is provided directly by you — during account registration, identity verification, deposit transactions, support interactions, or when updating your account profile.
4.2 Automatically through platform use: When you visit bdrumy.net or use the platform on any device, certain technical data is collected automatically through cookies, log files, and similar technologies. This includes your IP address, device identifiers, and session behaviour. See Section 10 for full details on our cookie practices.
4.3 From third-party verification services: To comply with our responsible gaming and anti-fraud obligations, bdrumy may use third-party identity verification services to confirm the accuracy of information you provide. These services may cross-reference your data against official databases.
4.4 From payment processors: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment processor may share transaction confirmation data with bdrumy for reconciliation and fraud-prevention purposes.
4.5 From fraud prevention agencies: bdrumy may receive risk signals and fraud alerts from third-party fraud detection services that monitor for suspicious betting patterns, account duplication, and money-laundering indicators.
5.1 bdrumy processes personal data for the following specific purposes:
| Purpose | Categories of Data Used |
|---|---|
| Account registration and authentication | Identity, contact, account & authentication data |
| Age verification (18+ compliance) | Identity data, KYC documents, date of birth |
| Processing deposits and withdrawals | Financial & payment data, identity data |
| Settling bets and awarding winnings | Betting & gaming activity, financial data |
| Fraud prevention and anti-money-laundering | All categories, including technical & device data |
| Responsible gaming monitoring and tool delivery | Gaming activity, account data, communications data |
| Customer support and complaint resolution | Identity, contact, communications data |
| Sending transactional notifications (e.g., deposit confirmed) | Contact data, financial data |
| Sending promotional communications (where consented) | Contact data, gaming preferences |
| Platform security and technical maintenance | Technical & device data, account data |
| Analytics and platform improvement | Technical data, gaming activity (anonymised where possible) |
| Legal and regulatory compliance obligations | All categories as required by applicable law |
5.2 bdrumy does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review, except where this is explicitly permitted by law.
5.3 bdrumy does not sell, rent, or lease your personal data to commercial third parties for their own marketing purposes under any circumstances.
6.1 bdrumy relies on the following legal bases to process your personal data:
7.1 bdrumy shares personal data only in the following circumstances and only to the extent necessary for the stated purpose:
7.2 All third-party data processors engaged by bdrumy are required to handle personal data in accordance with confidentiality obligations and data security standards consistent with this Policy.
Our commitment: bdrumy does not sell, rent, trade, or lease personal data to any third party for commercial marketing purposes. Your data is shared only to deliver the platform services you have requested or where legally required.
8.1 bdrumy retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or for as long as required by applicable legal or regulatory obligations.
8.2 The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data (active account) | For the duration of the account relationship |
| Account and identity data (closed account) | 5 years from account closure |
| KYC and verification documents | 5 years from account closure or last transaction |
| Financial transaction records | 5 years from the date of each transaction |
| Betting and gaming activity records | 3 years from date of activity |
| Support and communications records | 3 years from the date of the last communication |
| Technical and device logs | 13 months from collection date |
| Marketing consent records | 3 years from the date of last interaction or opt-out |
8.3 Where data is retained beyond the end of the active account relationship solely for legal compliance purposes, it will be stored in a restricted access environment and will not be used for any other purpose.
8.4 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.
9.1 bdrumy implements a layered approach to data security, combining technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or destruction.
9.2 Key technical security measures in place on the bdrumy platform include:
9.3 Organisational measures include staff access controls on a strict need-to-know basis, data handling training for all personnel with access to player data, and documented incident response procedures.
9.4 In the event of a personal data breach that poses a risk to your rights and freedoms, bdrumy will notify affected players without undue delay, providing details of the nature of the breach, the data involved, and the steps taken to mitigate any harm.
9.5 While bdrumy takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. Players are encouraged to use strong, unique passwords, enable two-factor authentication, and notify bdrumy immediately if they suspect unauthorised access to their account.
10.1 bdrumy uses cookies and similar tracking technologies to ensure the platform operates correctly, to remember your preferences, and to analyse how the platform is used.
10.2 The following categories of cookies are used on bdrumy.net:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for core platform functionality: login session management, security tokens, load balancing | Session / up to 24 hours |
| Functional | Remembers your preferences such as language settings, display options, and last game played | Up to 90 days |
| Analytics | Collects aggregated, anonymised data about page visits, session duration, and navigation paths to help bdrumy improve the platform | Up to 13 months |
| Fraud Prevention | Device fingerprinting and IP tracking used to detect multi-accounting, bonus abuse, and suspicious transaction patterns | Up to 12 months |
10.3 Strictly necessary cookies do not require your consent as they are essential to deliver the platform service you have requested. Functional, analytics, and fraud-prevention cookies are deployed on the basis of legitimate interests or, where applicable, explicit consent.
10.4 You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the bdrumy platform. Strictly necessary cookies cannot be disabled without preventing platform access entirely.
11.1 As a user of the bdrumy platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact bdrumy at [email protected] with the subject line "Data Rights Request" and your registered username.
Request a copy of all personal data bdrumy holds about you (Subject Access Request). We will respond within 30 days.
Request correction of inaccurate or incomplete personal data held about you.
Request deletion of your personal data where there is no longer a lawful basis for retention. Note: legal retention obligations may prevent full erasure.
Request that bdrumy restricts processing of your data to storage only, pending resolution of a dispute or complaint.
Request your personal data in a structured, machine-readable format where processing is based on consent or contract.
Object to processing of your data based on legitimate interests, including profiling for marketing purposes.
Withdraw any previously given consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Lodge a formal complaint with bdrumy's data team if you believe your data has been mishandled. We will respond within 10 business days.
To submit a data rights request, email [email protected] with the subject line "Data Rights Request", your username, and a description of your request. We will verify your identity before processing any request. Responses will be delivered within 30 calendar days of verified receipt.
12.1 The bdrumy platform is strictly for adults aged 18 years and above. bdrumy does not knowingly collect, process, or retain personal data from any individual under the age of 18.
12.2 During account registration, all applicants are required to confirm that they are 18 years of age or older. bdrumy reserves the right to request documentary evidence of age at any time, including but not limited to a National ID card, passport, or birth certificate.
12.3 Where bdrumy identifies or reasonably suspects that personal data belonging to a person under 18 has been collected, the relevant account will be immediately suspended, all funds will be frozen pending investigation, and any data collected will be deleted to the extent permitted by our anti-fraud and legal compliance obligations.
12.4 Parents and guardians who believe that a minor has registered on the bdrumy platform should contact [email protected] immediately. bdrumy will treat all such reports as a priority and take appropriate action within 24 hours.
13.1 As an offshore platform serving players in Bangladesh, bdrumy's servers and data processing infrastructure may be located in jurisdictions outside Bangladesh. By using the platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries whose data protection laws may differ from those in Bangladesh.
13.2 Where personal data is transferred to third-party processors in other jurisdictions, bdrumy requires those processors to implement data protection standards consistent with this Policy and with internationally recognised security frameworks.
13.3 Transfers to payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) are made on the basis of contractual necessity — these transfers are required to process the transactions you initiate and cannot be avoided.
14.1 bdrumy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features.
14.2 Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — bdrumy will notify registered players by email to their registered address with a minimum of 14 days' notice before the changes take effect.
14.3 Minor amendments, such as clarifications or formatting corrections that do not change the substance of this Policy, may be made without advance notice. The updated Policy will be published at bdrumy.net/privacy-policy with a revised effective date.
14.4 Continued use of the bdrumy platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised terms, you must close your account before the effective date of the change.
15.1 For all privacy-related queries, data rights requests, or concerns about how bdrumy handles your personal data, please use the contact details below:
15.2 All formal data rights requests must be submitted in writing to the email above. bdrumy does not accept verbal data rights requests. Written requests create an auditable record and ensure your request is handled accurately and within the required timeframe.
15.3 Before processing any data rights request, bdrumy will verify your identity by cross-referencing the request against the account registration details on file. This step protects your data from being disclosed to unauthorised third parties.
Why It Matters
Our privacy commitments go beyond legal compliance. Here is what we actively do to keep your personal data safe and your experience trustworthy.
All data transmitted between your device and our servers is protected with 256-bit SSL/TLS encryption — the same standard used by global banks. Your login credentials, payment details, and personal information are never transmitted in plain text.
bdrumy will never sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used only to deliver the platform services you have signed up for and to meet our legal obligations. Full stop.
You hold eight distinct privacy rights over your data — including the right to access, correct, delete, and port your information. Submit a request to [email protected] and we will respond within 30 calendar days, every time.
We do not hold your data indefinitely. Every data category has a defined retention period — after which it is securely deleted or fully anonymised. Financial records are held for 5 years to meet compliance requirements; device logs are purged after 13 months.
bdrumy engages independent security specialists to conduct regular penetration tests and vulnerability assessments on our platform infrastructure. Any identified weaknesses are remediated before they can affect player data.
In the unlikely event of a data breach that puts your personal information at risk, bdrumy is committed to notifying affected players without undue delay — clearly explaining what happened, what data was involved, and what steps are being taken to address it.
Now that you know how we protect your data, dive into Bangladesh's most trusted cricket betting and casino platform — with secure bKash, Nagad, and Rocket payments built in from day one.