bdrammy Privacy Policy

Data We Collect

bdrammy collects personal data from you in the course of providing its betting and casino services. We collect only the data that is necessary for a specific, stated purpose — we do not collect data speculatively or in excess of what our operations require. The categories of personal data we collect are described in detail below.

Registration Data

When you create a bdrammy account, we collect the information you provide during registration. This includes your full legal name, date of birth, email address, mobile phone number, and residential address (including division and district within Bangladesh). This data is required to verify your identity, confirm your eligibility to play, and maintain your account.

Identity Verification Data

As part of our Know Your Customer (KYC) obligations, bdrammy may request copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence, as well as proof of address such as a utility bill or bank statement. These documents are used solely for identity and age verification purposes and are handled with the highest level of confidentiality.

Transaction Data

Every deposit and withdrawal processed through your bdrammy account generates a transaction record. We retain the date, time, amount, currency (BDT / ৳), payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and the transaction reference number issued by the payment provider. We do not store full card numbers; only the last four digits and card type are retained for reference purposes.

Betting & Gaming Activity Data

We record details of every bet placed, game session initiated, and wager settled on bdrammy. This includes the market or game title, stake amount, odds or RTP applied, outcome, and timestamp. This data is used for account statement generation, dispute resolution, bonus tracking, and responsible gaming monitoring.

Technical & Device Data

When you access bdrammy via a web browser or mobile device, our servers automatically log certain technical information. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited during each session. This data helps us diagnose technical issues, detect fraud, and improve platform performance.

Communication Data

If you contact bdrammy's support team via email, live chat, or any other channel, we retain a record of that correspondence. This includes the content of your messages, the date and time of contact, and the outcome of any support interaction. These records are used for quality assurance and to maintain a history of your account-related queries.

Summary of Data Categories

How We Use Your Data

bdrammy uses the personal data we collect for the following specific purposes. We process your data only where we have a lawful basis for doing so, which in the context of our services typically means contract performance (processing is necessary to provide the service you signed up for), legal obligation (processing is required by anti-money laundering, KYC, or responsible gaming regulations), or legitimate interest (processing is necessary for fraud prevention and platform security).

• Account creation and management: To register your bdrammy account, maintain your profile, process deposits and withdrawals, and provide you with a full account history.
• Identity and age verification: To confirm that you are who you say you are and that you are at least 18 years of age before granting access to real-money betting and gaming services.
• Transaction processing: To execute deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests back to your verified payment method in Bangladeshi Taka (৳).
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent account activity, bonus abuse, money laundering, and unauthorised access attempts. This includes automated analysis of login patterns, IP addresses, and transaction behaviour.
• Responsible gaming compliance: To monitor your betting activity for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to comply with our obligations as a responsible gaming operator.
• Customer support: To respond to your queries, resolve account disputes, process complaints, and provide technical assistance through our 24/7 English-language support team.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering standards, international gaming regulations, and data protection requirements.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the bdrammy platform, optimise game performance, and enhance the overall user experience for players in Bangladesh.
• Marketing communications (with your consent only): To send you promotional emails or SMS notifications about bdrammy bonuses, seasonal offers (such as Eid or BPL promotions), and platform updates — but only if you have opted in to receive marketing communications. You may withdraw this consent at any time.

Data Sharing & Disclosure

bdrammy does not sell, rent, or trade your personal data to third parties for commercial gain. We share your data only in the limited circumstances described below, and in every case we apply contractual safeguards to ensure that the recipient handles your data with the same care and confidentiality that we apply ourselves.

Payment Processing Partners

To execute deposits and withdrawals, bdrammy shares the minimum necessary transaction data with our integrated payment providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay (UCB), Visa, and Mastercard. These providers receive only the information required to process the specific transaction — they do not receive your full betting history or account profile.

Game Software Providers

bdrammy integrates games from leading software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you participate in a game session, your player ID and session data are transmitted to the relevant provider's server to deliver the game. These providers are contractually prohibited from using your session data for any purpose other than game delivery and fairness certification.

Identity Verification Services

To fulfil KYC obligations, bdrammy may share your identity documentation with third-party verification service providers. These providers are engaged solely to confirm document authenticity and return a verification result; they do not retain copies of your documents beyond the period required for the verification process.

Legal and Regulatory Disclosure

bdrammy may be required by law, court order, or regulatory directive to disclose certain personal data to authorities. In such cases, we will disclose only the specific data requested and will, where legally permissible, inform you that a disclosure request has been received.

Anti-Money Laundering Reporting

Where bdrammy identifies transaction patterns that raise a reasonable suspicion of money laundering or other financial crime, we are legally obligated to file a report with the appropriate financial intelligence authority. Such reports are filed confidentially, and we are legally prohibited from notifying the account holder that a report has been made ("tipping off" prohibition).

Cookies & Tracking Technologies

bdrammy uses cookies and similar browser-based technologies to maintain your session, secure your account, and improve platform performance. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Is a Cookie?

A cookie is a small text file that a website stores in your browser when you visit. Cookies allow the website to remember information about your visit — for example, that you are logged in — so that you do not need to re-enter your credentials on every page. Cookies cannot execute code or deliver viruses; they are passive data files.

Types of Cookies We Use

bdrammy does not use advertising cookies, retargeting pixels, or any tracking technology that follows your activity across other websites. All analytical data collected via cookies is aggregated and anonymised before being used for platform improvement decisions.

Managing Your Cookie Preferences

You can control or disable cookies through your browser settings at any time. Most modern browsers (Chrome, Firefox, Edge, Safari) provide a settings menu where you can view and delete stored cookies, and block future cookies from specific domains. Please note that disabling strictly necessary cookies will prevent you from logging into your bdrammy account, as these cookies are essential for session security.

Data Retention & Storage

bdrammy retains your personal data for as long as your account is active and for a defined period thereafter, as required by our legal obligations and legitimate operational needs. We do not retain data beyond the period for which there is a documented purpose.

Retention Periods by Data Category

• Account registration data: Retained for the duration of your account and for a minimum of five years after account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for five years from the date of verification, or five years from account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping standards.
• Betting and gaming activity records: Retained for five years from the date of the activity.
• Support correspondence: Retained for three years from the date of the interaction, unless the correspondence relates to a dispute or legal matter, in which case it is retained for the duration of that matter plus two years.
• Technical and device logs: Retained for twelve months from the date of collection, after which they are automatically deleted or anonymised.
• Marketing consent records: Retained for as long as you hold an active account. If you withdraw marketing consent, the consent withdrawal record is retained for three years as evidence of compliance.

Where Your Data Is Stored

bdrammy's primary data infrastructure is hosted on servers located in secure, access-controlled data centres. All servers storing personal data are protected by firewalls, intrusion detection and prevention systems, and are subject to regular independent security assessments. Access to personal data is strictly limited to authorised bdrammy personnel who require it to perform their job functions, and all such access is logged and audited.

Your Privacy Rights

As a bdrammy player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 24 hours and provide a substantive response within 72 hours.

• Right of access: You have the right to request a copy of all personal data that bdrammy holds about you. We will provide this in a structured, readable format within 72 hours of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as email address or phone number) directly from your account settings after login, or request a correction via support.
• Right to erasure: You may request the deletion of your personal data. We will fulfil erasure requests where there is no overriding legal obligation to retain the data (for example, anti-money laundering retention requirements may prevent immediate deletion of transaction records, but all other data can be erased).
• Right to restriction of processing: You may request that bdrammy restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and we are assessing that objection.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.
• Right to withdraw marketing consent: If you have opted in to receive promotional communications from bdrammy, you may withdraw that consent at any time by updating your notification preferences in your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any marketing communications sent before the withdrawal.
• Right to request human review of automated decisions: If an automated system has made a significant decision about your account (such as a fraud-related suspension), you have the right to request that a human member of bdrammy's compliance team reviews that decision.

Security Measures

Protecting the personal data of bdrammy's players is a core operational priority. We implement a layered security architecture that encompasses technical controls, organisational processes, and ongoing staff training to minimise the risk of unauthorised access, disclosure, or loss of personal data.

Technical Security Controls

• 256-bit SSL/TLS encryption for all data in transit between your device and bdrammy's servers.
• AES-256 encryption for sensitive data fields stored in our databases, including payment method details and identity document references.
• Bcrypt hashing for all account passwords. bdrammy never stores passwords in plain text or reversible format.
• Web Application Firewall (WAF) to block common web-based attack vectors including SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF).
• Intrusion Detection and Prevention System (IDPS) monitoring all inbound and outbound network traffic in real time.
• Two-factor authentication (2FA) available to all players via SMS OTP to any Bangladeshi mobile network (Grameenphone, Robi, Banglalink, Teletalk).
• Automated session timeout after a period of inactivity to reduce the risk of unauthorised access on shared devices.

Organisational Security Measures

Access to personal data within bdrammy's systems is governed by a strict role-based access control (RBAC) policy. Only personnel with a documented business need are granted access to specific categories of personal data, and all access is logged, monitored, and subject to periodic review. All bdrammy staff who handle personal data are required to complete data protection training and are bound by confidentiality obligations.

Data Breach Response

In the unlikely event of a data breach that poses a risk to your personal data, bdrammy's incident response team will assess the breach within 24 hours of detection. Affected players will be notified by email as soon as practically possible, with a clear description of what data was involved, what steps bdrammy has taken to contain the breach, and what actions you may wish to take to protect yourself. bdrammy will also notify the relevant regulatory authority within the timeframe required by applicable law.

Policy Updates & Contact

bdrammy reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, or improvements to our platform. When we make a material change to this Policy — meaning a change that meaningfully affects how we collect, use, or share your personal data — we will notify registered players by email to the address associated with their account, with at least seven days' notice before the change takes effect.

The "Effective Date" shown at the top of this Policy and in Section 1 always reflects the date on which the current version entered into force. We recommend bookmarking this page and reviewing it periodically, particularly before making a new deposit or engaging with a new game category on bdrammy.

Minor updates — such as corrections to typographical errors, clarifications that do not change the meaning of any provision, or updates to third-party provider names — may be made without individual notification, though the Effective Date will be updated to reflect the revision.

Contact for Privacy Enquiries

For any question, concern, or formal request relating to this Privacy Policy or to the personal data that bdrammy holds about you, please contact our dedicated privacy support team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: We acknowledge all privacy enquiries within 24 hours and provide a substantive response within 72 hours.
• Availability: Our English-language support team is available 24 hours a day, 7 days a week, 365 days a year.