brummy Privacy Policy

1. Data Controller

brummy operates as the data controller for all personal data collected through the brummy.onl platform. For all data-related enquiries, requests, or complaints, please contact our dedicated support team at [email protected]. We aim to acknowledge all privacy-related correspondence within five working days and to resolve substantive requests within 30 days of receipt.

2. What Personal Data We Collect

brummy collects personal data in several ways — directly from you during registration and account use, automatically through your device and browser, and from third-party partners where permitted. The categories of personal data we collect include:

3. How We Collect Your Data

brummy collects personal data through the following channels:

• Direct interactions: When you register an account, complete identity verification (KYC), make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automated technologies: When you visit brummy.onl, our servers automatically log technical and usage data through cookies, server logs, and similar tracking technologies.
• Third-party sources: We may receive data from payment processors (such as bKash, Nagad, and Rocket), fraud detection services, and identity verification partners where necessary to process your transactions securely and to comply with our anti-money laundering obligations.

4. How We Use Your Personal Data

brummy processes your personal data only where we have a lawful basis to do so. The primary purposes for which we use your data are set out below:

• Account management: To create, maintain, and administer your player account, including processing deposits, withdrawals, and bonus allocations.
• Identity and age verification: To confirm that you are at least 21 years of age and that the information you have provided is accurate, as required by our internal policies.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and any other prohibited conduct on the platform.
• Customer support: To respond to your enquiries, resolve disputes, and handle complaints effectively.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to administer self-exclusion, deposit limits, and cooling-off periods where requested.
• Platform improvement: To analyse usage patterns and technical data in order to improve the performance, reliability, and features of the brummy platform.
• Communications: To send you transactional notifications (such as deposit confirmations and withdrawal updates), security alerts, and — where you have consented — promotional communications about offers and new features.
• Legal compliance: To meet our obligations under applicable laws, including record-keeping requirements and responses to lawful requests from authorities.

5. Cookies and Tracking Technologies

brummy uses cookies and similar tracking technologies to enhance your experience on the platform and to collect technical and usage data. Cookies are small text files stored on your device by your browser when you visit brummy.onl.

We use the following types of cookies:

• Strictly necessary cookies: These are essential for the platform to function. They enable core features such as account login sessions, security tokens, and load balancing. You cannot opt out of these cookies as they are required for the site to work.
• Functional cookies: These remember your preferences (such as language settings and display options) to provide a more personalised experience.
• Analytics cookies: These collect anonymised data about how visitors use the platform, such as which pages are visited most frequently and how long sessions last. This data helps us improve the site.
• Session cookies: These are temporary cookies that expire at the end of your browsing session and are used to maintain your logged-in state while you navigate the platform.

You can control and delete cookies through your browser settings. Disabling certain cookies may affect the functionality of the brummy platform, including your ability to log in or use certain features.

6. Data Sharing and Disclosure

brummy does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Payment processors: We share necessary financial and identity data with payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi banking partners) in order to process your deposits and withdrawals securely.
• Identity verification providers: We use trusted third-party KYC and age-verification services to confirm player identities. These providers process your identity documents under strict confidentiality agreements.
• Fraud and security services: We may share data with anti-fraud and anti-money laundering service providers to protect the integrity of the platform and the security of all players.
• Legal and regulatory authorities: brummy will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by law or in response to a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of brummy's business, player data may be transferred to the acquiring entity. Players will be notified of any such transfer in advance.

All third parties with whom brummy shares personal data are contractually required to handle that data securely, to use it only for the specified purpose, and to comply with applicable data protection standards.

7. Data Security

brummy applies a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data, including passwords (which are hashed and salted and never stored in plain text) and payment method details.
• Access controls limiting which members of brummy's team can access personal data, based on the principle of least privilege.
• Regular security audits and penetration testing of platform infrastructure.
• Automatic session timeouts and two-step verification options for player accounts.

While brummy takes all reasonable steps to protect your data, no online platform can guarantee absolute security. If you suspect that your account has been compromised, please contact [email protected] immediately.

8. Data Retention

brummy retains your personal data for as long as your account is active and for a further period as required by applicable legal and regulatory obligations. Specifically:

• Account and transaction data is retained for a minimum of five years after account closure to satisfy record-keeping requirements related to financial transactions and anti-money laundering compliance.
• Identity verification documents are retained for the duration of the account relationship and for up to five years after closure.
• Support communications are retained for up to three years from the date of the interaction.
• Technical and usage logs are typically retained for up to 12 months and then anonymised or deleted.
• Marketing consent records are retained for the life of the account plus three years so that we can demonstrate a valid consent basis for any promotional communications sent.

Once the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be attributed to you as an individual.

9. Marketing Communications

brummy may send you promotional communications about new games, bonuses, and special offers by email or SMS, but only where you have given your explicit consent to receive such communications. You may withdraw your consent at any time by:

• Clicking the "Unsubscribe" link in any promotional email.
• Updating your communication preferences in your brummy account settings.
• Contacting our support team at [email protected] with a request to opt out of marketing.

Withdrawing your marketing consent will not affect the delivery of transactional messages (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent as part of the essential account service.

10. Children and Minors

The brummy platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by someone under 21, that account will be immediately suspended, all balances will be reviewed, and any personal data associated with that account will be deleted in accordance with this policy. If you believe a minor has accessed brummy, please notify us immediately at [email protected].

11. International Data Transfers

brummy's primary operations and player base are in Bangladesh, and we store and process data within secure data centres. Where data is transferred to third-party service providers based outside Bangladesh (for example, international payment processors or cloud infrastructure providers), brummy takes steps to ensure that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this policy.

12. Third-Party Links

The brummy platform may contain references to third-party payment services (such as bKash, Nagad, and Rocket). These services are operated independently and have their own privacy policies. brummy is not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before using their services.

13. Changes to This Privacy Policy

brummy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The most current version of this policy will always be available at brummy.onl/privacy-policy. Where changes are material — meaning they significantly affect your rights or the way your data is used — brummy will notify registered players via email or a prominent on-platform notice. The date at the top of this document indicates when the policy was last revised. Your continued use of the brummy platform after any update constitutes your acceptance of the revised policy.

14. Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how brummy handles your personal data, please contact our support team. All privacy correspondence should be directed to: [email protected]. Please include your registered account username and a clear description of your query or concern. Our team will respond in English and aims to address all privacy-related requests within 30 days of receipt, in accordance with standard data subject request timelines.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority or seek independent legal advice.