Introduction & Scope
This Privacy Policy explains how Druto7 Casino ("Druto7", "we", "us") collects, stores, uses, and protects the personal information of users ("you", "member") of our website and services.
By creating an account or using Druto7, you agree to this Privacy Policy. This policy is Terms & Conditions' an integral part.
We comply with international data protection laws (including GDPR) and applicable local regulations. Your privacy is not just a legal obligation for us — it is an ethical responsibility.
This policy was last updated in January 2026. You will be notified at your registered email address whenever any changes are made.
What Information We Collect
Druto7 collects your data in three ways — directly from you, automatically as you use the platform, and from third-party verification services.
| Data Type |
When It Is Collected |
Mandatory? |
| Full Name & Date of Birth |
At Registration |
Yes |
| Email & Mobile Number |
At Registration |
Yes |
| National ID (NID) / Passport |
During KYC Verification |
On Withdrawal |
| Payment Information |
On Deposits/Withdrawals |
Yes |
| IP Address & Device Information |
Automatically |
Technical |
| Gaming History |
Play Time |
System |
| Location Data |
Automatically |
Under Sanctions Review |
We always follow a data minimisation policy. Information that is not necessary to provide the service is never requested.
How Your Information Is Used
Druto7 uses your data only for specific, legitimate purposes. Before using data for any purpose, we ensure it is consistent with this policy.
- Account Management: For registration verification, login security, and profile management.
- Payment Processing: Transaction data is processed to handle deposits and withdrawals.
- Legal Compliance: To comply with Anti-Money Laundering (AML) regulations and KYC requirements.
- Service Improvement: Analytics to personalise your gaming experience and improve the platform.
- Security Assurance: To detect and prevent fraudulent activity.
- Contact & Support: For sending important updates, promotional offers (where consent has been given), and providing support.
- Responsible Gaming: To identify problematic gaming behavior and provide appropriate support.
Your data is never shared with third parties for advertising purposes. You may unsubscribe from our promotional emails at any time.
Sharing Information with Third Parties
Druto7 never sells your data. However, limited information may be shared with trusted partners in specific circumstances to deliver our services:
- Payment Processors: Only the information necessary to process bKash, Nagad, and bank transfer transactions.
- Identity Verification Services: Secure third-party services for KYC document verification.
- Game Software Providers: Only the minimum data required to operate the game.
- Law Enforcement Authorities: When required to comply with a legal directive or court order.
- Fraud Detection Service: To detect fraudulent transactions.
All third parties with whom we share data are contractually bound to uphold our privacy standards. They may use the information received only for the specified purpose.
Cookies & Tracking Technologies
The Druto7 website uses cookies — small text files stored in your browser that help the platform remember your preferences.
Essential Cookies (Mandatory)
Essential for maintaining login sessions, security verification, and core platform functionality.
Functional Cookies (Optional)
For storing language preferences, theme settings, and personalisation data.
Analytics Cookies (Optional)
Platform usage statistics are collected and used to improve the overall experience.
Cookies can be disabled from your browser settings, though this may limit certain platform features.
Data Retention Period
Druto7 does not retain your information indefinitely. A specific retention period is defined for each type of data:
- Account Information: For the duration of the active account and for 5 years after closure (as required by law).
- Financial transaction records: A minimum of 5 years (in accordance with international financial regulations).
- KYC Documents: Retained for up to 5 years after verification.
- Gaming Logs & History: Up to 3 years.
- Customer Support Conversations: Up to 2 years.
- Marketing Preferences: Deleted immediately upon unsubscription.
Once the retention period expires, your data is automatically and securely deleted.
Your Data Rights
Druto7 gives you full control over your personal data. The following rights are yours to exercise at any time:
Right to Access
Access
You can request to view all personal information we hold about you.
Right to Rectification
Correction
Contact support to correct any inaccurate or outdated information.
Right to Erasure
Deletion
Where there is no legal obligation to retain it, you may request that your data be deleted.
Right to Portability
Data Portability
You can download your data in a standard format (JSON/CSV).
Right to Object
Objection
You may object to the processing of your data for any specific purpose.
Right to Restriction
Restriction
In certain circumstances, you may request that the processing of your data be temporarily suspended.
To exercise any of these rights, email us at [email protected] or reach out via Live Chat. We will respond within 30 days of receiving your request.
Minor Protection Policy
No one under the age of 18 may hold an account on Druto7. We do not knowingly collect any information from minors.
Age is verified at registration, and re-confirmed through a government-issued ID during the KYC process before any withdrawal. If a minor is found to have created an account using false information, the account will be closed immediately and all associated data will be deleted.
For Parents: If you suspect your child is using Druto7, contact us immediately. We will address the matter with the utmost seriousness.
Security Measures & Technology
Druto7 uses industry-standard security technology to protect your data. Our security framework is multi-layered:
Encryption Strength256-bit SSL
Firewall ProtectionEnterprise Grade
Data Backup Reliability99.9%
Two-Factor Authentication (2FA)On all accounts
- All data transmissions are secured with TLS 1.3 encryption.
- Passwords are stored using the bcrypt hashing algorithm. Even we cannot see your password.
- Regular third-party penetration testing and security audits are conducted.
- If a suspicious login attempt is detected, your account is automatically locked and you are notified immediately.
In the event of a data breach, we are legally obligated and committed to notifying affected users within 72 hours.
Policy Updates & Notifications
Druto7 may update this privacy policy from time to time. Changes may be driven by new legal requirements, technological developments, or service expansions.
Before any significant changes, we will:
- We will post a notice on the website and update the date at the top of the page.
- Full details will be sent to your registered email.
- For significant changes, consent will be obtained again at login.
Continued use of the platform after a policy update will be considered your acceptance of the revised policy.
Contact & Complaints
For any privacy-related questions, concerns, or complaints, please contact our Data Protection Team:
- Email: [email protected] (Subject: "Privacy Request")
- Live Chat: Available 24/7 on the platform, with support in Bengali
- Response Time: 7 business days for standard requests, 48 hours for urgent matters
If you are not satisfied with our response, you may file a complaint with the relevant data protection authority.