At drummy, protecting your personal data is a core operational responsibility, not an afterthought. This Privacy Policy explains exactly what information we collect when you use the drummy platform, how that information is used, who it may be shared with, and what rights you hold over your own data.
This Privacy Policy ("Policy") describes the practices of drummy ("we", "us", "our", "drummy") with respect to the collection, use, storage, and disclosure of personal data obtained from users ("you", "your", "User") of the drummy platform, including the website at drummy.club and all associated mobile interfaces, betting markets, casino game lobbies, cashier systems, and customer support channels (collectively, the "Platform").
drummy is committed to handling personal data with care, transparency, and integrity. We collect only the personal data necessary to operate the Platform, fulfil our legal obligations, and deliver a safe and personalised experience for every player in Bangladesh and internationally. We do not sell your personal data to third parties, and we do not use it for purposes beyond those described in this Policy.
This Policy is effective from 1 January 2026. It supersedes all prior versions of the drummy Privacy Policy. We encourage you to review this page periodically, as updates may be made to reflect changes in our data practices or applicable law.
drummy collects personal data through several channels: directly from you when you register or interact with the Platform; automatically through your use of the Platform; and, in limited circumstances, from third parties such as payment service providers and identity verification partners.
When you create a drummy account, we collect the following information:
To comply with anti-money laundering (AML) requirements and to verify player eligibility, drummy may collect:
All deposit and withdrawal activity on drummy generates a transaction record. We collect and retain:
drummy records all gaming and betting activity for operational, security, and responsible gaming purposes, including:
When you access drummy, our systems automatically collect certain technical information:
drummy uses the personal data we collect for the following purposes. We do not use your data in any manner inconsistent with this Policy or the purposes disclosed at the point of collection.
| Purpose | Data Used |
|---|---|
| Account registration and authentication | Name, email, mobile number, password |
| Age and identity verification (KYC) | NID, passport, proof of address, selfie |
| Processing deposits and withdrawals | Payment method details, transaction records |
| Delivering and improving Platform services | Gameplay data, session logs, device data |
| Fraud detection and security monitoring | IP address, device fingerprint, transaction patterns |
| Responsible gaming compliance | Gameplay history, self-exclusion status, limit settings |
| Customer support and dispute resolution | Account data, correspondence, transaction records |
| Sending account notifications and alerts | Email address, mobile number |
| Personalising promotions and offers | Gameplay preferences, betting history |
| Legal and regulatory compliance | All categories as required by applicable law |
drummy does not use automated decision-making processes that produce legal or similarly significant effects on users without human review. Where profiling is used to personalise promotions, you may opt out by contacting [email protected].
Where data protection laws require drummy to identify a legal basis for processing personal data, we rely on one or more of the following grounds:
drummy does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data only in the limited circumstances described below.
drummy engages third-party service providers who process personal data on our behalf in order to operate the Platform. These include identity verification partners, payment processing facilitators (bKash, Nagad, Rocket, Upay), game technology providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe), cloud hosting providers, and customer support platform operators. All such providers are contractually bound to process your data only as instructed by drummy and to maintain appropriate security standards.
drummy may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so — for example, in response to a valid court order, subpoena, or regulatory investigation. We will notify you of any such disclosure request to the extent permitted by law.
In the event that drummy undergoes a merger, acquisition, reorganisation, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent Platform notice before your data is transferred and becomes subject to a different privacy policy.
We may disclose personal data where we reasonably believe it is necessary to investigate, prevent, or act against suspected fraud, money laundering, cheating, bonus abuse, or any other illegal activity on the Platform, or to enforce our Terms & Conditions.
drummy uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They allow us to remember your preferences, maintain your login session, analyse Platform usage, and deliver a more personalised experience.
You may control cookies through your browser settings. Most browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.
drummy retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention principles apply:
When personal data is no longer required, drummy securely deletes or anonymises it in accordance with our internal data lifecycle management procedures.
drummy implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
While drummy takes all reasonable precautions, no system connected to the internet can be guaranteed to be completely secure at all times. In the event of a data breach that poses a material risk to your rights, drummy will notify affected users as quickly as practicable and take all appropriate remediation steps.
Depending on your jurisdiction and applicable data protection law, you may hold some or all of the following rights with respect to your personal data held by drummy. To exercise any of these rights, please submit a written request to [email protected]. drummy will respond to all valid requests within a reasonable timeframe, typically within 30 days.
You have the right to request a copy of the personal data drummy holds about you, along with information about how it is being used and on what legal basis.
If any personal data drummy holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your email address or mobile number, you may update these directly within your drummy account settings.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that this right is subject to drummy's legal obligations to retain certain records — particularly financial and KYC data — for minimum statutory periods.
In certain circumstances, you may request that drummy limit the way your personal data is processed — for example, while a dispute about the accuracy of the data is being resolved.
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of the personal data you have provided to drummy.
You may object to the processing of your personal data where drummy relies on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
The drummy Platform is strictly intended for adults aged 18 years and above. drummy does not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has provided personal data to drummy or created an account on the Platform, please contact us immediately at [email protected]. Upon confirmation, drummy will take prompt action to close the account, void any associated activity, and securely delete the personal data in question.
Age verification controls are applied at the point of registration and may be re-applied at any point during the account lifecycle if drummy has reasonable grounds to believe a user may be underage. This is a firm platform-wide policy with no exceptions.
drummy operates infrastructure across multiple jurisdictions in order to deliver a reliable and high-performance Platform to users in Bangladesh and internationally. As a result, your personal data may be transferred to and stored on servers located outside Bangladesh. Where such transfers occur, drummy takes reasonable steps to ensure that appropriate safeguards are in place — including standard contractual clauses or equivalent protections — to maintain the security and integrity of your data regardless of where it is processed.
By using the drummy Platform and submitting personal data to us, you acknowledge and consent to the transfer of your data in the manner described in this section. If you have concerns about international data transfers, please contact [email protected].
The drummy Platform may contain references to third-party game providers, payment processors, or other services. While drummy makes every effort to work only with reputable partners, we do not control the privacy practices of third-party websites or services and are not responsible for their content or data handling. This Privacy Policy applies solely to data collected by drummy through the drummy Platform. We encourage you to review the privacy policies of any third-party service you interact with independently of the drummy Platform.
drummy may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable legal requirements. When we make material changes, we will notify registered users via email or a prominent on-Platform notification, and the revised Policy will be published on this page with an updated effective date.
Your continued use of the drummy Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should discontinue use of the Platform and may request account closure as described in our Terms & Conditions. We recommend bookmarking this page and reviewing it periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way drummy handles your personal data, please contact our dedicated data support team. All privacy-related enquiries are handled confidentially and with priority.
For urgent matters such as suspected data breaches affecting your account, please mark your email "URGENT — Data Security" to ensure it is escalated immediately to our security team. drummy's support team is available 24 hours a day, 7 days a week.
Our Privacy Commitments
Six core privacy principles that guide how drummy collects, handles, and safeguards your personal data every day.
All data transmitted between your device and the drummy Platform is protected by TLS/SSL encryption. Sensitive data stored on our servers — including passwords and payment identifiers — is encrypted at rest using industry-standard cryptographic methods.
drummy has never sold your personal data to third parties and never will. We share data only with service providers who are contractually bound to process it solely on our behalf, or where required by law. Your information is not a product on this platform.
You retain the right to access, correct, export, or request deletion of your personal data at any time. Marketing consent can be withdrawn with a single email. drummy responds to all data subject requests within 30 days.
drummy collects only the personal data that is strictly necessary for each specific purpose. We do not gather excessive information or retain data beyond the periods required by law and operational necessity. Less data means less risk.
Access to personal data within drummy's internal systems is governed by strict role-based controls. Only personnel with a genuine operational need to view specific data categories are authorised to do so, and all access is logged and audited.
Whenever drummy makes a material change to this Privacy Policy, registered users are notified by email before the change takes effect. We believe in clear, proactive communication — not burying updates in hard-to-find change logs.
Our support team is available around the clock to help with any privacy enquiry. You can also explore the FAQ for quick answers, or visit our Responsible Gaming page to learn about the player-protection tools available on drummy.
18+ only. Please play responsibly. This Privacy Policy applies to all use of the drummy platform.