shell99 Official Privacy Policy

Privacy Policy shell99 – Malaysia Member Data Protection & Privacy

Shell99 is fully committed to protecting your privacy and personal data. This page transparently explains how we collect, use, store, and safeguard your information as a member of our platform.

Last Updated: 1 January 2026

Important Note: This Privacy Policy describes shell99's data collection and usage practices. By using our platform, you agree to the terms stated here. Please read carefully and contact us if you have any questions.

Shell99 Full Privacy Policy

1

Introduction & Scope of This Policy

Shell99 ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy applies to all users accessing the shell99.fun website, the shell99 mobile app, and any related services we provide.

This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We take our responsibilities as a data controller seriously and ensure all data processing is carried out lawfully, fairly, and transparently.

This policy covers information on the types of data we collect, the purpose of collection, how we protect your data, your rights as a data owner, and how to contact us regarding privacy matters.

2

Types of Personal Data We Collect

We collect various types of data depending on your interactions with the shell99 platform. Below is a summary of the data we may collect:

Data Category Example Information Purpose
Identity Full name, IC number, date of birth KYC verification, fraud prevention
Relationship Phone number, email address Account communications, notifications
Financial Bank account number, transaction records Deposit & withdrawal processing
Technical IP address, device type, web browser Security, usage analytics
Conduct Game records, preferences, login history Experience personalization, analytics

We no collect sensitive data such as health information, religious beliefs, or political views unless required by law for compliance purposes.

3

How We Collect Your Data

Shell99 collects personal data through a variety of transparent and lawful methods:

  • Account Registration: Information you provide when creating a new account, including name, email, and phone number
  • KYC Process: Identity verification documents uploaded to meet legal compliance requirements
  • Financial Transactions: Details required to process deposits and withdrawals through integrated payment channels
  • Platform Usage: Data automatically generated when you use our website or app, including session records and usage patterns
  • Communications: Information you share when contacting our support team via live chat or email
  • Cookies: Data collected through cookies and similar tracking technologies to improve user experience and platform security

All data collection methods are conducted transparently. We never purchase third-party data lists or collect data without your knowledge.

4

Purposes for Using Your Personal Data

Shell99 only uses your personal data for lawful purposes that were stated at the time of collection. The following are our primary purposes:

  • Account Management: Create, verify, and maintain your shell99 account securely
  • Transaction Processing: Process deposits, withdrawals, and all financial transactions efficiently and accurately
  • Identity Verification (KYC): Meet anti-money laundering (AML) legal compliance requirements
  • Platform Security: Detect and prevent fraud, unauthorised access, and suspicious activity
  • Customer Support: Provide effective technical assistance and support services
  • Service Communications: Send important notifications related to your account, promotions, and platform updates
  • Platform Improvements: Analyse usage patterns to enhance the overall user experience
  • Legal Compliance: Fulfil reporting obligations to relevant authorities when required

We will not use your data for any other purpose without your prior consent, except where required by law.

5

Third-Party Data Sharing & Disclosure

Shell99 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, we may share your data in the following limited circumstances:

  • Payment Service Providers: Parties that assist in processing your financial transactions, subject to strict confidentiality agreements
  • Technical Service Providers: Companies providing cloud infrastructure, cybersecurity, and platform maintenance services, all bound by data protection agreements
  • Authorities & Regulatory Bodies: When required by Malaysian law or a valid court order
  • Anti-Fraud Authority: Limited sharing for industry fraud detection and prevention purposes

Every third party we share data with is bound by strict data protection agreements and must meet the same or higher security standards that we apply.

International Data Transfers: In certain cases, your data may be processed by servers located outside Malaysia. We ensure all such data transfers are carried out with adequate safeguards and in compliance with applicable legal requirements.

6

Security & Data Protection

Your data security is shell99's top priority. We continuously invest in the latest security infrastructure to ensure your data is always protected against unauthorised access, loss, or misuse.

Key security measures we implement:

  • 256-bit SSL encryption for all data transmitted between your device and our servers
  • Database-level data encryption for all stored sensitive information
  • Two-factor authentication (2FA) for more secure account access
  • Round-the-clock security monitoring by an experienced cybersecurity team
  • Regular security audits by independent third parties
  • Strict access controls — only authorised personnel may access personal data
  • Automatic data backups with tested disaster recovery protocols

While we take all reasonable precautions, no digital security system can be guaranteed 100% impenetrable. We therefore encourage you to take protective measures on your end, such as using a strong and unique password and never sharing your login credentials with anyone.

7

Data Retention Period

Shell99 retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or for as long as required by applicable Malaysian law.

  • Active Account Data: Retained for the duration of your active account plus the minimum retention period required by law
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial law requirements
  • KYC Documents: Retained for the duration of the business relationship and for a minimum of 5 years after account closure
  • Security Logs: Retained for 2 years for fraud investigation and prevention purposes
  • Marketing Data: Retained until you withdraw consent or request deletion

Once the retention period expires, your data will be securely deleted or anonymized so it can no longer be personally linked to you.

8

Cookies & Tracking Technologies

Shell99 uses cookies and similar technologies to enhance platform functionality and user experience. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session authentication and security — cannot be disabled
  • Performance Cookies: Collect anonymised information about how you use the platform to help us improve our services
  • Functional Cookies: Save your preferences such as language and display settings for a more convenient experience
  • Analytics Cookies: Help us understand aggregate usage patterns for continuous improvement purposes

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of some parts of our platform. We do not use third-party cookies for external advertising purposes.

9

Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 and the data protection principles we uphold, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data subject to applicable legal obligations
  • Right to Withdraw Consent: Withdraw consent for data processing at any time without affecting the validity of processing carried out prior to withdrawal
  • Right to Object: Object to the processing of your data for specific purposes such as direct marketing
  • Right to Data Portability: Receive your data in a machine-readable format

To exercise any of the above rights, contact our privacy team by email at [email protected] or via in-app live chat. We will respond to your request within 14 business days. In complex cases, this period may be extended to 30 days with advance notice to you.

10

Privacy Policy Amendments

Shell99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or industry standards. Any material changes will be communicated to you via in-app notification or email before they take effect.

The "Updated" date at the top of this page will always reflect the latest version of this policy. We encourage you to review this page periodically. Continued use of the shell99 platform after changes are published constitutes acceptance of the amended policy terms.

Why Your Privacy Matters to shell99

In the online entertainment industry, trust is everything. As a platform serving hundreds of thousands of active members across Malaysia, shell99 understands that your trust is not something to be taken lightly. Every time you deposit funds, place a bet, or share personal information with us, you are extending a trust we take with the utmost seriousness.

That is why shell99 continuously invests in cutting-edge security and privacy infrastructure. The 256-bit SSL encryption we use is the same standard adopted by leading banking institutions in Malaysia. Our cybersecurity team monitors the platform around the clock, 24 hours a day, to detect any threats or suspicious activity before they affect you.

Beyond legal compliance, we believe that respecting user privacy is the moral responsibility of every accountable technology company. Your data belongs to you — we only use it to provide you with a better, safer, and more personalised experience.

Malaysia PDPA Compliance

Shell99 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This means every aspect of collecting, processing, and storing our members' personal data is carried out in accordance with the seven data protection principles set out in the Act — namely the general principle, notice and choice principle, disclosure principle, security principle, data integrity principle, access principle, and retention principle.

Privacy by Design Approach

Shell99 adopts a Privacy by Design approach — meaning privacy considerations are built into every stage of product and feature development, rather than added as an afterthought. Every new feature goes through an internal privacy review before it reaches you. We also limit data collection strictly to what is necessary, avoiding the excessive data harvesting practised by some other platforms.

If you suspect any data breach or misuse of your information, please contact us immediately at [email protected]. We are committed to investigating every report within 48 hours and taking appropriate action.

How Does shell99 Protect Your Privacy?

Six layers of data protection we implement to keep your personal information safe at all times.

256-Bit SSL Encryption

All data transmitted between your device and shell99 servers is protected with 256-bit encryption — the same standard used by leading Malaysian banks to secure online transactions.

Two-Factor Authentication (2FA)

An additional security layer via 2FA ensures only you can access your shell99 account, even if your password is compromised. Enable 2FA easily through your account settings.

Strict Access Controls

Your personal data may only be accessed by authorised shell99 staff who require it to fulfil their job responsibilities. All access is logged and regularly audited.

24/7 Real-Time Monitoring

Our cybersecurity team continuously monitors the platform to detect any threats, unauthorized access attempts, or suspicious activity patterns before they can affect you.

Regular Independent Audits

Shell99's security and privacy practices are regularly audited by accredited independent third parties. These audits ensure we consistently meet or exceed the latest industry standards.

Malaysia PDPA Compliance

Shell99 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). Every data collection and processing procedure is carried out in accordance with the seven data protection principles set out in the Act.

Your Rights as a shell99 Member

We respect your rights as a data owner. Find out what you can do to take control of your personal information.

Data Access Right

You may request a complete copy of all personal data we hold about you at any time. Requests will be processed within 14 business days.

Right to Rectification

If any information we hold about you is inaccurate or outdated, you have the right to request immediate correction via your account settings or through support.

Right to Erasure

You may request deletion of your personal data, subject to legal retention obligations. Eligible requests will be processed within 30 days.

Right to Object

You have the right to object to the processing of your data for specific purposes such as direct marketing. Objections will be enforced immediately upon receipt.

Data Portability Right

Request your data in a structured, machine-readable format for transfer to another service provider of your choice.

Right to Withdraw Consent

You may withdraw consent for data processing at any time without affecting the validity of any processing carried out prior to withdrawal.

Privacy Policy FAQs

Answers to the most frequently asked questions about privacy and data protection at shell99.

Absolutely not. shell99 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data is only shared with service providers who help us operate the platform, and only when required by Malaysian law. All third parties involved are bound by strict data protection agreements.

You can submit a data access request in two ways: first, via live chat in the shell99 app by stating that you wish to make a "Personal Data Access Request"; or second, by emailing [email protected] with the subject line "Data Access Request" along with your full name and account number. Our privacy team will respond within 14 business days with details of the data we hold.

When you close your shell99 account, we will retain your personal data for the minimum period required by Malaysian law — typically 5 to 7 years for financial records to meet AML compliance and tax law requirements. Once the mandatory retention period expires, your data will be securely deleted or permanently anonymised. You may contact us for more details about your specific data deletion schedule.

You can manage cookie settings through your web browser. Please note, however, that essential cookies required for core platform functions such as login session authentication cannot be disabled without affecting your ability to use the platform. Non-essential performance and analytics cookies can be disabled without issue. We do not use third-party cookies for external advertising purposes.

If you suspect any data breach or suspicious activity on your account, take the following steps immediately: first, change your shell99 account password; second, enable two-factor authentication if you have not done so; third, contact our support team via live chat to temporarily freeze your account during the investigation. shell99 is committed to investigating every reported data breach within 48 hours and will keep you informed of findings and actions taken.
A Safe & Trusted Platform in Malaysia

Your Data Is Protected,
Your Experience, Secured.

Join over 500,000 active members who trust shell99 as their preferred online entertainment platform. Register today and enjoy Malaysia's best security, privacy, and entertainment all in one place.

18+ only  |  256-bit SSL Encryption  |  Malaysia PDPA Compliance

Bahasa Melayu