Privacy Policy

drummy- Your privacy is our top priority at

How your personal data is collected, where it is stored, and how it is kept secure — all explained clearly here.

Last Updated: January 2026
Our commitment: drummy never sells your personal data or shares it with third parties without your consent. Your data, your rights.
SSL encryption
Data Is Never Sold
User Controls
5-Year Retention Policy

How we protect your data

A quick overview of the most important points in drummy's Privacy Policy.

Encrypted Data Storage

All your personal and financial data is protected with AES-256 encryption. It cannot be accessed by any outside party.

Your Data Is Never Sold

Drummy does not sell your data to advertisers or third parties. Your information is used solely to provide you with our services.

Your rights are protected

You can view, correct, or request deletion of your data at any time. That is your right.

Cookie Controls

We only use essential cookies. Your consent is obtained for any analytics or marketing cookies.

Retained for a Defined Period

Your data is not kept longer than necessary. Unless required by law, it is deleted after your account is closed.

No Data Collected from Minors

Drummy never collects any data from users under 18. This policy is strictly enforced.


This Privacy Policy drummy.onl- applies to all services offered on our platform. By using our site or creating an account, you agree to this policy.

01 What types of data we collect

Drummy collects certain information to provide you with its services. This falls into three categories: what you provide directly, what is collected automatically during your use of the platform, and what is required for identity verification.

Data Type What's Included Mandatory
Identity Information Full name, date of birth, NID number Yes
Contact Information Mobile number, email address Yes
Financial information BKash/Nagad/Rocket number, transaction history Yes
Device Information IP address, browser type, operating system Automatic
Gaming Information Game history, bet records, win/loss data Automatic
KYC documents National ID photo, selfie On withdrawal

02 How We Collect Your Information

Drummy collects your information in several ways. All methods are transparent and based on your consent.

  • Via the registration form
    The name, number, and email you provide at registration are stored directly.
  • During the KYC verification process
    A copy of your NID or birth certificate is collected to verify your identity before a withdrawal is processed.
  • Automatic Tracking
    Device information and browsing data are collected via cookies and log files while using the site.
  • In payment transactions
    During deposits or withdrawals, the transaction reference and amount from the payment gateway are recorded.
  • In support communications
    When you report an issue to support, the conversation is stored to help us improve our service quality.

03 How Your Information Is Used

Your data is used only for specific, legitimate purposes. drummy never uses your information for unrelated activities.

  • Account management: To create your account, manage logins, and ensure account security.
  • Payment Processing: To successfully process deposit and withdrawal requests.
  • Gaming Services: To record game results and calculate bonus credits and loyalty points.
  • Identity Verification (KYC): To prevent fraud and ensure legal compliance.
  • Customer Support: To resolve your issues and handle complaints.
  • Security Monitoring: To detect and prevent suspicious activity.
  • Relevant Notifications: To send promotions, bonus updates, or important notifications (only with your consent).
  • Legal obligations: To comply with legal requests from relevant authorities.
If you do not want drummy to send you promotional messages, you can opt out at any time through your account settings or by contacting support.

04 Data Sharing Policy

Drummy does not sell your data. In limited circumstances, information may be shared with trusted partners — always for a specific, defined purpose.

Reason for Sharing With Whom Your consent
Payment Processing BKash, Nagad, Rocket Agreed to transactions
Identity Verification KYC service provider For KYC compliance
Legal order Government / Legal Authorities Legal obligation
Technology Services Cloud Hosting Provider Under NDA agreement
Fraud Prevention Security Partners Under NDA agreement

Your information is not shared with any third parties beyond those listed above. All our service providers operate under a Non-Disclosure Agreement (NDA).

05 Data Protection Measures

Drummy protects your data with multiple layers of security. Our systems are built to meet international security standards.

TLS/SSL encryption

All data transmitted between the site and servers is encrypted using TLS 1.3.

AES-256 database encryption

All sensitive data at rest is encrypted using the AES-256 standard.

Two-Factor Authentication (2FA)

Two-factor authentication is active for account login and withdrawals.

Regular Security Audits

Third-party security experts regularly audit our systems for vulnerabilities.

Limited Access Policy

Only authorized personnel can access specific data.

Data Backup & Recovery

Secure backups are taken daily — no risk of data loss in the event of an incident.

06 Cookie Policy

Cookies are small files stored in your browser. drummy uses three types of cookies:

Cookie Type Purpose Duration Can it be turned off?
Required Login session, security At end of session No (Mandatory)
Analytics User Behavior Analysis 1 year Yes
Marketing Showing Relevant Offers 30 days Yes

You can disable non-essential cookies at any time through your browser settings. Note that some features may not function properly as a result.

07 Data Retention Duration

Drummy does not retain your data longer than necessary. The retention periods for different types of information are outlined below:

Data Type Retention Period Reason
Account information For as long as the account remains active To Provide Our Services
Transaction History 5 years Legal obligation
KYC documents 5 years Regulatory Authority Requirements
Gaming History 3 years Dispute Resolution
Support Conversations 2 years Service Improvement
Log Files 90 Days Security Monitoring
Marketing Cookies 30 days Relevant Offers

After the retention period, data is automatically deleted or anonymized. Certain data may be kept longer if required by legal obligations.

08 Your rights

As a drummy user, you have full control over your own data. You can exercise the following rights at any time:

Right to Access Your Data

To see what information we hold about you, submit a request to support. We will respond within 7 business days.

Right to Rectification

You may request corrections to any inaccurate information. Updating your name or date of birth may require additional verification.

Right to Erasure

If you close your account and there are no outstanding legal obligations, your data will be deleted.

Right to Restrict Processing

You may request that your information not be used for specific purposes, such as opting out of marketing communications.

Right to Data Portability

You can request an export of your data in a standard format (CSV/PDF).

Right to object

You may object to certain types of data processing. drummy will comply unless there are legitimate grounds to do otherwise.

To exercise any of your rights [email protected]- or reach us via the support chat. We typically respond within 7 business days.

09 Third-Party Services

Drummy works with certain trusted third-party services, such as payment gateways and cloud hosting providers. These services have their own privacy policies, but drummy ensures they are committed to protecting our users' data.

  • Payment Gateway (bKash/Nagad/Rocket): Used solely to complete transactions. Card numbers or PINs are never stored on drummy's servers.
  • Cloud Hosting: Server data is stored in encrypted form. The hosting provider is bound by a confidentiality agreement.
  • Analytics tools: Only anonymized data is used. No personal identity is disclosed.

Drummy does not use social media tracking pixels or external advertising networks.

10 Children's Privacy

Drummy is an adult platform. We do not knowingly collect information from anyone under the age of 18. Age verification is mandatory during registration.

  • Date of birth is verified at the time of registration.
  • If a minor's account is detected, it is immediately suspended and all associated data is deleted.
  • If a parent or guardian believes their child has created an account, please contact our support team.
If an account belonging to a user under 18 is detected, it will be permanently closed without notice and the balance will be forfeited.

11 Privacy Policy Updates

Drummy may update this privacy policy from time to time. If significant changes are made, you will be notified via your registered email or SMS. Continued use of the site after any update constitutes acceptance of the revised policy.

  • The date of any update will always be shown at the top of this page.
  • For major changes, a notification will be sent at least 7 days in advance.
  • Available on request via legacy version support.

12 Contact Us

For any questions, complaints, or requests to exercise your rights regarding this Privacy Policy, please contact us:

Data Protection Team Email: [email protected]
Response time: typically within 24–48 hours
Hours of Operation: 24/7 (seven days a week)

Our About us You'll find more detailed contact information on this page. We take all privacy-related concerns seriously and address them with the highest priority.


Everything You Need to Know About Privacy

Here are answers to the most frequently asked questions.

No, drummy never sells your information. Data is only shared with third parties for payment processing, KYC verification, or legal obligations — and confidentiality agreements are in place in every case.

KYC documents are retained for a maximum of 5 years in accordance with regulatory requirements. Once the retention period expires, documents are automatically and permanently deleted.

Yes, data portability is your right. Submit a request to support and your account information, transaction history, and gaming records will be sent in CSV or PDF format. This typically takes 7 business days.

Most data is deleted. However, transaction history and KYC documents must be retained for a specified period due to legal obligations. Once that period expires, all data is permanently deleted.

Only with your consent. Marketing communication consent is collected separately at registration. You can withdraw this consent at any time via your account settings or by contacting support.

Your data is safe — join drummy today

Your privacy is fully protected at drummy. Register on our secure platform and join thousands of players across Bangladesh.

18+
For adults only. Please gamble responsibly.
বাংলা