bdrume Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how bdrume ("the Platform", "we", "us", "our"), operating at https://bdrume.net, collects, processes, stores, and protects personal data belonging to players ("you", "your") who register accounts on, or interact with, the bdrume platform.

bdrume is committed to maintaining the highest practicable standards of data privacy and information security. This Policy is written in plain English so that players based in Bangladesh and elsewhere can clearly understand how their personal information is handled, and what choices and rights are available to them.

By registering an account on bdrume or continuing to use the platform after this Policy has been updated, you confirm that you have read and accepted the data practices described herein. This Policy should be read alongside the bdrume Terms & Conditions, which together form the complete agreement governing your use of the platform.

Personal Data We Collect

bdrume collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party service providers involved in payment processing and identity verification. The categories of data collected are detailed in the table below:

bdrume applies the principle of data minimisation: we collect only the data that is necessary and proportionate to the specific purpose for which it is collected. Where a data field is optional, this will be clearly indicated at the point of collection.

How We Use Your Personal Data

bdrume uses personal data collected from players for the following specific purposes:

• Account Registration and Management: To create and maintain your player account, verify your identity at registration, and administer your account on an ongoing basis.
• Identity Verification (KYC): To comply with Know Your Customer procedures before processing withdrawal requests, and to verify that players meet the platform's age and eligibility requirements.
• Payment Processing: To process deposit requests received via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and Visa/Mastercard, and to execute approved withdrawal requests to your registered payment method.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account takeover attempts, and other activities that may harm the platform or other players.
• Responsible Gaming Compliance: To monitor player activity for indicators of problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit limits and session controls as set by the player.
• Customer Support: To respond to support enquiries, resolve complaints, process account closure requests, and communicate important account-related information.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, user experience, and game selection. Individual player data is not used for this purpose in an identifiable form.
• Marketing Communications: Where you have not opted out, to send you information about relevant promotions, bonus offers, and platform updates. You may opt out of marketing communications at any time by contacting support.

Legal Basis for Processing

bdrume processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil the player agreement — including account registration, payment processing, and customer support — is carried out because it is necessary to perform the contract between you and bdrume.
• Legal Obligation: Processing carried out to meet applicable anti-money laundering, identity verification, and record-keeping obligations is done because bdrume is legally required to do so.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring is carried out on the basis of bdrume's legitimate interest in operating a safe, fair, and legally compliant platform. This processing is balanced against your privacy interests and does not override your rights.
• Consent: Where bdrume relies on your consent — such as for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing and Third Parties

bdrume does not sell personal player data to third parties. We share data only in the limited circumstances listed below, and only to the extent necessary for the specific purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and Visa/Mastercard receive the transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Game Studios and Content Providers: Third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive a pseudonymous player identifier to facilitate game session management and RNG certification. No personally identifiable information beyond a session token is shared with game studios.
• Identity Verification Partners: Where bdrume uses a third-party identity verification service to assist with KYC processing, your identity documents are shared with that service solely for the purpose of verification. These partners are contractually bound to process your data only for this purpose and to maintain it securely.
• Legal and Regulatory Authorities: bdrume may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the legal rights of the platform or other players.
• Business Transfers: In the event that bdrume undergoes a merger, acquisition, or sale of assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via the email address registered to their account.

All third parties with whom bdrume shares personal data are required to handle that data securely and in accordance with applicable data protection standards. bdrume does not permit third parties to use player data for their own independent marketing or commercial purposes.

Cookies and Tracking Technologies

bdrume uses cookies and similar tracking technologies on its website. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences, and analyse usage patterns. The types of cookies used by bdrume are as follows:

• Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, remember your game preferences, and ensure that the platform displays correctly on your device. Essential cookies cannot be disabled without impairing your ability to use the platform.
• Analytical Cookies: These cookies collect anonymised data about how players navigate the platform — which pages are visited most frequently, how long sessions last, and where players encounter errors. This data is used in aggregated form to improve the platform. No individual player is identified by analytical cookies.
• Functional Cookies: These cookies remember your language preference, display settings, and similar personalisation choices so that you do not need to re-enter them on each visit.
• Security Cookies: These cookies help bdrume detect suspicious login behaviour, prevent cross-site request forgery, and protect your account from unauthorised access attempts.

bdrume does not use third-party advertising cookies or behavioural tracking cookies that build profiles of your browsing activity across external websites. You may manage cookie preferences through your browser settings, though disabling essential cookies will affect your ability to log in and use the platform.

Data Retention

bdrume retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by legal or regulatory obligations. The general retention periods applied by bdrume are as follows:

• Active Account Data: Retained for the full duration of your account being open on the bdrume platform.
• Closed Account Data: Following account closure, identity data, transaction records, and account activity logs are retained for a minimum of five years to satisfy anti-money laundering record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five years from the date of submission, or such longer period as may be required by applicable law.
• Support Communications: Customer support correspondence is retained for a minimum of two years from the date of the last message, to assist with dispute resolution and complaint handling.
• Technical and Log Data: Server logs and technical access data are retained for a maximum of 12 months, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

Data Security

bdrume implements a range of technical and organisational security measures to protect personal player data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and bdrume servers.
• Encryption of sensitive data fields — including payment method identifiers and identity document images — when stored in the bdrume database.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access player data.
• Regular security audits and vulnerability assessments of the bdrume platform infrastructure.
• Two-factor authentication options for bdrume staff accounts with access to player data.
• Incident response procedures to ensure rapid detection, containment, and notification in the event of a data breach.

While bdrume takes all practicable steps to protect your data, no system connected to the internet can be guaranteed to be entirely immune from security incidents. In the unlikely event of a data breach affecting your personal information, bdrume will notify affected players promptly in accordance with applicable data breach notification obligations.

Your Data Rights

As a player on the bdrume platform, you hold the following rights in relation to the personal data bdrume holds about you. To exercise any of these rights, please contact the bdrume support team at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You may request a copy of the personal data bdrume holds about you. bdrume will provide this within a reasonable timeframe, subject to verification of your identity.
• Right to Rectification: If any personal data bdrume holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data. bdrume will honour erasure requests to the extent permitted by law, subject to retention obligations (see Section 7). Data that bdrume is legally required to retain cannot be erased prior to the expiry of the applicable retention period.
• Right to Restriction: You may request that bdrume restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where technically feasible, you may request that bdrume provide your account data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your data where bdrume relies on legitimate interests as the legal basis. bdrume will assess the objection and respond within a reasonable timeframe.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

bdrume will acknowledge all data rights requests within 5 business days and aims to resolve requests fully within 30 calendar days. Where a request is complex or voluminous, bdrume may extend this period and will communicate the extension to you in writing.

Children's Privacy

bdrume is a strictly adult-only platform. Persons under the age of 18 are not permitted to register an account, deposit funds, or access any feature of the bdrume platform. bdrume does not knowingly collect personal data from individuals under 18 years of age.

If bdrume discovers or has reason to believe that a player is under 18, the account will be suspended immediately pending investigation. Any funds deposited by a minor are subject to return to the payment source, subject to verification, and any bets placed or winnings generated will be voided.

If you are a parent or guardian and believe that a person under your care has registered on bdrume without authorisation, please contact the support team immediately at [email protected]. bdrume will investigate and close the account promptly.

Third-Party Links and Services

The bdrume platform may, in certain contexts, reference or display content from third-party game studios and payment providers. These third parties operate their own platforms and services governed by their own privacy policies. bdrume is not responsible for the data practices of third-party game studios, payment service providers, or any other external entity whose services are integrated into or referenced from the bdrume platform.

Players who interact directly with a third-party service — for example, by using the bKash or Nagad mobile app to complete a deposit — are subject to that provider's own terms of service and privacy policy in relation to data processed through that provider's systems. bdrume recommends that players review the privacy policies of all payment providers they use.

Updates to This Privacy Policy

bdrume reviews and updates this Privacy Policy on a periodic basis to reflect changes in data processing practices, applicable law, or platform features. The effective date at the top of this page indicates when the current version came into force.

Where updates to this Policy are material — meaning they significantly change how bdrume collects, uses, or shares your personal data — bdrume will provide advance notice to registered players via the email address associated with their account. For non-material updates such as typographical corrections or minor clarifications, the Policy may be updated without individual notification, and the effective date will be revised accordingly.

Your continued use of the bdrume platform after any update to this Policy constitutes your acceptance of the revised practices. If you do not agree with an updated Policy, you should stop using the platform and contact support to request account closure.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdrume handles your personal data, please contact the bdrume data support team using the details below. All privacy-related enquiries are treated with priority and handled confidentially.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: For data rights requests, use "Data Rights Request — [Your Username]". For general privacy queries, use "Privacy Query — [Your Username]".
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time Target: Privacy enquiries are acknowledged within 5 business days and resolved within 30 calendar days

bdrume is committed to resolving privacy concerns promptly and fairly. If you are not satisfied with the response you receive, you retain the right to seek independent legal advice or escalate the matter to the appropriate authority in your jurisdiction.