shell999 Privacy Policy 🔒

1. Who We Are

shell999 ("we", "us", "our") refers to the operating entity behind the shell999.org platform, a licensed online casino and sports betting service operating under international gaming authority licensing. Shell999 is the data controller in respect of personal data collected through shell999.org and all associated services. Our registered contact for data-related enquiries is [email protected].

2. Information We Collect

Shell999 collects personal data only where it is necessary to provide, maintain, and improve our services, comply with legal and regulatory obligations, and keep the platform secure. The categories of personal data we may collect include:

• Identity Data: Full legal name, date of birth, NRIC or passport number (required for KYC verification prior to withdrawal processing).
• Contact Data: Malaysian mobile number, email address, and residential address where provided.
• Account Credentials: Username and hashed password (passwords are never stored in plaintext).
• Financial Data: Payment method identifiers, transaction amounts, deposit and withdrawal history. Shell999 does not store full card numbers or complete bank account details.
• Technical Data: IP address, device type, browser type and version, operating system, and session duration collected automatically during platform use.
• Usage Data: Game activity records, bet history, wagering patterns, pages visited, and features used within the shell999 platform.
• Communications Data: Records of correspondence with shell999 support, including live chat transcripts and email exchanges.
• Verification Documents: Copies of identity documents submitted during KYC, stored securely and accessed only by authorised compliance personnel.

3. How We Use Your Data

Shell999 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your shell999 member account.
• Service Delivery: Enabling access to live casino games, slots, and the sportsbook; processing deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, and other supported channels.
• Identity & Age Verification: Confirming that members meet the minimum age requirement of 21 years and verifying identity as required under our international gaming authority licence.
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, money laundering, and other prohibited activities. Technical data including IP addresses is used to identify unusual access patterns.
• Regulatory Compliance: Fulfilling obligations under applicable gaming regulations, anti-money laundering laws, and reporting requirements mandated by our licensing authority.
• Customer Support: Responding to enquiries, resolving disputes, and providing assistance through our 24/7 support channels.
• Marketing Communications: Sending promotional offers and platform updates to members who have opted in. You may withdraw consent for marketing communications at any time by contacting support.
• Platform Improvement: Analysing aggregate usage data to improve shell999's game library, user interface, and overall member experience.
• Responsible Gaming: Monitoring gaming activity patterns to identify members who may be experiencing problem gambling behaviours, and facilitating access to self-exclusion and limit-setting tools.

4. Legal Basis for Processing

Shell999 relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing required to perform the contract established when you create a shell999 account and accept the Terms & Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with gaming licence conditions, AML regulations, KYC obligations, and other applicable legal requirements.
• Legitimate Interests: Processing conducted to prevent fraud, maintain platform security, and analyse usage patterns — where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

Shell999 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment Processors: Data necessary to process deposits and withdrawals is shared with licensed payment service providers including Touch n Go eWallet, Boost, GrabPay, and banking partners. These providers are contractually bound to process data solely for the purpose of facilitating your transactions.
• Game Providers: Game studios supplying casino and slot content to shell999 may receive anonymised session data for the purpose of game performance analytics and dispute resolution.
• KYC & AML Service Providers: Identity verification documents may be processed by third-party compliance platforms engaged by shell999. These providers operate under strict data processing agreements.
• Regulatory Authorities: Shell999 will disclose personal data to gaming regulators, law enforcement, or other governmental authorities where required to do so by applicable law or licensing conditions.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring, member data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party processors engaged by shell999 are subject to data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

6. Cookies & Tracking

Shell999 uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and analyse usage patterns. The categories of cookies used include:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing core functionality.
• Functional Cookies: Store your preferences such as language settings and game lobby filters to personalise your shell999 experience.
• Analytics Cookies: Collect aggregated information about how members use the shell999 platform — which pages are visited, session durations, and error frequencies — to support continuous improvement.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content. These cookies may record your visits to the shell999 platform for the purpose of presenting relevant offers.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the shell999 platform.

7. Data Retention

Shell999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of your membership with shell999.
• Transaction Records: Retained for a minimum of five (5) years following the relevant transaction, as required by anti-money laundering regulations applicable under our gaming licence.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the end of the business relationship.
• Support Correspondence: Retained for up to three (3) years following resolution of the relevant matter.
• Marketing Consent Records: Retained for the period during which consent remains active, and for a reasonable period thereafter as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with shell999's data disposal procedures.

8. Data Security

Shell999 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the shell999 platform.
• Encrypted storage of sensitive data including passwords and financial records.
• Role-based access controls limiting data access to authorised personnel only.
• Regular security audits and penetration testing of the shell999 platform infrastructure.
• Automated fraud detection systems monitoring transactions and login activity in real time.
• Device-binding alerts notifying members of sign-in attempts from unrecognised devices.

Despite these measures, no internet-based platform can guarantee absolute security. Shell999 recommends that members use strong, unique passwords for their accounts and never share login credentials with third parties. Shell999 will never ask for your password via email, SMS, or live chat.

9. Your Rights

Subject to applicable data protection law and the conditions of our gaming licence, shell999 members have the following rights in relation to their personal data:

• Right of Access: You may request a copy of the personal data shell999 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding retention obligations under gaming and AML regulations.
• Right to Restriction: You may request that shell999 restrict processing of your data in certain circumstances.
• Right to Data Portability: You may request a structured, machine-readable copy of data you have provided to shell999.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Objecting to marketing will result in immediate cessation of marketing communications.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, contact shell999 support at [email protected]. Shell999 will respond within a reasonable timeframe consistent with applicable data protection standards. Shell999 may require identity verification before processing a data rights request.

10. Children's Privacy

The shell999 platform is strictly restricted to individuals aged 21 and above. Shell999 does not knowingly collect personal data from anyone under 21 years of age. If shell999 discovers that personal data has been collected from an individual below the minimum age, that data will be deleted and the associated account closed immediately. If you believe a minor has registered a shell999 account, please contact support immediately at [email protected].

11. Changes to This Policy

Shell999 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. When material changes are made, shell999 will publish the updated Policy on shell999.org with a revised "Last Updated" date. Continued use of the shell999 platform following publication of an updated Policy constitutes your acceptance of the revised terms. Members are encouraged to review this page periodically.

12. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or shell999's data practices, please contact us:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the shell999 platform in English, Mandarin, and Bahasa Malaysia

Shell999 is committed to resolving data-related queries promptly and transparently. If you remain unsatisfied with our response, you may escalate your complaint to the relevant supervisory authority under our applicable gaming and data protection regulatory framework.