drummy Privacy Policy

drummy is committed to protecting the personal data of every player who uses the platform. We collect only the information we genuinely need to operate a safe, fair, and functional online gaming service for our users in Bangladesh. We do not sell your data to third parties, we do not use it for unsolicited advertising, and we implement technical and organisational safeguards appropriate to the sensitivity of the information we hold.

This Privacy Policy applies to all personal data collected through the drummy website at drummy.ws, including data collected during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and any marketing communications you have opted in to receive. By registering an account or continuing to use drummy after this Policy's effective date, you acknowledge that you have read and understood its terms.

drummy collects personal data from you directly (when you provide it during registration, KYC verification, or support interactions) and automatically (through your use of the Platform). The categories of personal data we may collect include the following:

drummy processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data are described below, along with the corresponding lawful basis for each:

drummy does not sell, lease, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment partners receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for data they hold.
• Identity Verification Partners: Third-party KYC service providers may receive copies of your identity documents to assist with age and identity verification. These partners are bound by strict data processing agreements with drummy.
• Game Studio Providers: Providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, and Spribe receive the minimum technical session data necessary to deliver their games within the drummy Platform. They do not receive your financial or identity data.
• IT Infrastructure Providers: Cloud hosting, server management, and cybersecurity partners who support the operation of drummy.ws may have access to platform data under confidentiality obligations.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement, financial intelligence units, or other government bodies where required by law or in response to a valid legal request.
• Business Successors: In the event of a merger, acquisition, or sale of assets involving drummy, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

drummy retains your personal data for as long as your account is active and for a reasonable period thereafter, in accordance with the following principles:

• Active Accounts: All personal data associated with an active drummy account is retained for the duration of the account's existence plus a minimum of five (5) years following account closure, to satisfy record-keeping obligations.
• Financial Transaction Records: Deposit, withdrawal, and wagering records are retained for a minimum of seven (7) years from the date of each transaction for audit and compliance purposes.
• Identity Documents (KYC): Copies of identity documents submitted for KYC verification are retained for the statutory minimum period applicable to the platform integrity standards under which drummy operates, typically five (5) years from the date of submission.
• Support Communications: Emails, live chat transcripts, and dispute records are retained for three (3) years from the date of the interaction.
• Marketing Data: Where you have withdrawn your marketing consent, your opt-out preference is recorded and retained indefinitely to prevent future unsolicited contact. All other marketing profile data is deleted within 30 days of opt-out.

When the applicable retention period expires, drummy will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

drummy uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how users interact with the site. The categories of cookies drummy uses are as follows:

• Strictly Necessary Cookies: Essential to the functioning of the Platform, including session authentication cookies that keep you logged in to your drummy account. These cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Collect anonymised data about page load times, error rates, and navigation paths to help us identify and fix technical issues. No personally identifiable information is collected via performance cookies.
• Functional Cookies: Remember your language preference, game display settings, and notification preferences so you do not need to reconfigure them on every visit.
• Analytics Cookies: Used to understand aggregate usage patterns across the drummy Platform. Data collected is anonymised and used solely for internal reporting and product improvement.

drummy does not use third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in to and use your drummy account.

drummy implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit TLS (Transport Layer Security) encryption for all data transmitted between your device and drummy.ws.
• Encryption at rest for databases containing personal and financial data.
• Multi-factor authentication requirements for all drummy staff with access to user data systems.
• Role-based access controls ensuring that only personnel with a legitimate operational need can access personal data.
• Regular internal security audits and vulnerability assessments of the drummy Platform infrastructure.
• Incident response procedures including breach notification protocols in the event of a confirmed data security incident affecting user data.

While drummy takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your drummy login credentials confidential and for logging out of shared or public devices after each session. If you suspect your account has been accessed without your authorisation, contact drummy support immediately at [email protected].

As a drummy user, you have the following rights in relation to your personal data. To exercise any of these rights, contact drummy's support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

drummy is strictly a platform for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. During account registration, all users are required to confirm their age. drummy's KYC verification process provides a further layer of age assurance by requiring documentary proof of identity and date of birth.

If drummy becomes aware that it has inadvertently collected personal data from a person under 21, it will take immediate steps to close the associated account, void any bets or bonuses, return any deposited real-money balance (as described in the Terms and Conditions), and permanently delete all personal data associated with that account.

If you are a parent or guardian and believe a minor may have created a drummy account, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act on all such reports promptly.

drummy may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes that materially affect how we use your personal data, we will notify registered users via email or a prominent notice on the Platform prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how drummy is protecting your information. Your continued use of the Platform after any changes to this Policy constitutes your acceptance of those changes. If you do not agree with the updated terms, you may close your account by contacting [email protected].