shell99 Privacy Policy

Introduction and Scope of This Policy

This Privacy Policy is issued by shell99 ("Company", "we") and applies to all users, registered members and visitors of the shell99.run website ("Website"). This policy explains how we collect, use, disclose, store and protect your personal information in connection with your use of the services provided by the Company.

This Privacy Policy is to be read together with our Terms and Conditions of Use. If there is any conflict between the two documents, this Privacy Policy will apply for matters relating to personal information. We reserve the right to update this Privacy Policy from time to time and any significant changes will be communicated to members through appropriate channels.

Personal Information We Collect

For the purposes of registration, identity verification and service provision, shell99 collects the following categories of personal information from members:

• Full name as it appears on official identity documents
• Identity card number (MyKad) or valid passport
• Date of birth to confirm the applicant is 21 years of age or older
• Active email address for communication and account verification purposes
• Mobile phone number for two-factor authentication and important notifications
• e-wallet account information (Touch 'n Go eWallet, ShopeePay) or bank account details for processing deposits and withdrawals
• Financial transaction records including deposits, withdrawals and betting activity
• Technical data such as IP address, device type, operating system and browsing session data
• Records of interactions with our customer support team

We only collect information necessary for the stated purposes and do not collect excessive data. All information collected is to ensure the security of your account and compliance with applicable licensing requirements.

Purpose of Using Personal Information

Personal information collected by shell99 is used for the following purposes:

• Processing new account registrations and verifying member identity according to KYC procedures
• Processing deposits via Touch 'n Go eWallet, DuitNow, online banking (FPX), ShopeePay and cryptocurrency, and withdrawals within 5–30 minutes
• Administering bonuses, VIP rewards and promotions offered to members, including a 100% welcome bonus of up to RM1,000
• Providing effective customer support via live chat and email in Bahasa Melayu and English
• Implementing measures to prevent fraud, money laundering and other illegal activities
• Complying with legal obligations and regulations imposed by our licensing authority
• Sending important updates relating to accounts, transactions and policy changes
• Improving service quality through analysis of usage patterns that do not identify individuals

Disclosure of Information to Third Parties

shell99 does not sell, rent or disclose your personal information to third parties for marketing purposes without your consent. However, there are certain situations where disclosure of information to third parties is necessary and lawful, namely:

• Payment processors and financial gateway providers that assist us in processing deposits and withdrawals
• Technology service providers that manage our server infrastructure and cyber security
• Regulatory bodies and licensing authorities within the scope of legal compliance
• Law enforcement agencies when required by a valid court order
• Analytics service providers that help us understand website usage patterns in the form of anonymised data

All third parties with whom we share information are required to handle that data to a level of security equal to or exceeding the standards we apply. They are not permitted to use that information for any purpose outside the scope of the services provided to us.

Your Rights as a Member

As a data subject, you have certain rights regarding the personal information we hold. These rights include:

• Right of Access: You have the right to request a copy of the personal information we hold about you at any time.
• Right of Rectification: If the information we hold is inaccurate or out of date, you have the right to request that we update it promptly.
• Right of Erasure: In certain circumstances, you may request that we delete your personal information, subject to record-keeping obligations under licensing regulations.
• Right to Object: You may object to the processing of your personal information for direct marketing purposes.
• Right to Restrict Processing: In certain circumstances, you may request that we limit how we process your information.
• Right to Data Portability: You have the right to receive a copy of your data in a machine-readable format for transfer to another service provider.

To exercise any of these rights, please contact our support team via live chat or email. We will process your request according to the established procedure and a response will be provided within a reasonable time.

Information Security and Protection Measures

shell99 implements various technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction. These measures include:

• Data encryption during transmission using high-standard TLS/SSL protocols
• Password storage using strong, irreversible hashing methods
• Two-factor authentication for login and withdrawal processes
• Continuous security monitoring to detect suspicious activity on member accounts
• Strict internal access controls, where staff can only access data required to carry out their duties
• Regular security audits by independent third-party experts
• Comprehensive incident response procedures to address any data breach

Although we take reasonable measures, no security system can guarantee absolute protection. We encourage members to also take precautions by keeping their passwords confidential and not sharing login details with anyone.

Data Retention Period

We retain your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy, including:

• Active account information is retained for as long as your account remains active
• Financial transaction records are retained for the period required by our licensing terms
• Customer support communication records are retained for reference and service improvement purposes
• Following account closure, some of your information may be retained to meet legal and licensing requirements

When the retention period ends and there is no legal requirement to keep the data, we will delete or anonymise your personal information in a secure manner.

Cookies and Tracking Technologies

The shell99 website uses cookies and similar tracking technologies to improve the user experience. The types of cookies we use are as follows:

• Necessary Cookies: Required for core website functions such as login sessions and security. They cannot be disabled.
• Performance Cookies: Collect information about how visitors use our website in the form of anonymised data for improvement purposes.
• Functional Cookies: Remember your preferences such as language and display settings to provide a more personalised experience.

You can control cookie settings through your browser settings. Please note that disabling certain cookies may affect your experience using our platform, but will not prevent you from accessing core functions.

Cross-Border Data Transfers

As a platform operating under international licensing, your personal information may be stored or processed on servers located outside Malaysia. In such situations, we ensure equivalent protection is given to your data, whether through legally binding data processing agreements or other recognised protection mechanisms.

We only use cloud service and infrastructure providers that comply with internationally recognised data security standards. Every data transfer is carried out with appropriate safeguards to ensure your information remains secure at all times.

Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal information, please contact our Privacy Officer through the following channels:

• Live chat on the shell99 website — available 24/7 in Malay and English
• Support email: [email protected]

We aim to respond to every privacy-related enquiry thoroughly. If you are not satisfied with our response, you have the right to refer the matter to the relevant regulatory authority under our licensing jurisdiction.