Shell888 Privacy Policy – Personal Data Protection for Malaysia Members

Shell888 is an online casino entertainment platform operating under a valid international gambling licence, and is committed to handling the personal data of all its members in Malaysia in a transparent, secure, and privacy-respecting manner.

This Privacy Policy applies to all individuals who interact with shell888 in any capacity — whether as a website visitor, a prospective member going through the registration process, an active member making deposits and playing, or a member who has closed their account but whose data is still retained to meet ongoing legal requirements.

This policy covers all channels of interaction between you and shell888, including the shell888.best website, live chat system, WhatsApp communications, customer support emails, and any other written or digital communications you initiate with our platform.

Shell888 complies with the data protection requirements applicable to our platform's operations. We continuously review and update our data protection practices in line with best practices in the information security industry, to ensure your data receives the level of protection that your trust in us deserves.

Shell888 only collects data genuinely necessary to deliver our services securely and comply with applicable legal requirements. We do not collect data irrelevant to our platform's operations. Below are the categories of data we collect and how they are sourced:

Shell888 uses collected personal data solely for lawful, specific purposes directly related to delivering our platform services. Your data is never used for purposes you would not reasonably expect or have not implicitly consented to upon registering as a shell888 member.

The primary purposes for which shell888 uses your data are:

• Account Management: Creating, maintaining and managing your shell888 account, including processing registrations, handling logins and providing access to all platform features
• Transaction Processing: Processing deposits in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX online banking, as well as processing your winnings withdrawals
• Identity Verification (KYC): Complying with anti-money laundering (AML) requirements and age verification to ensure all members are 21 years of age or older
• Customer Support: Handling your enquiries, complaints and assistance requests via live chat, email and WhatsApp in Bahasa Malaysia
• Platform Security: Detecting and preventing fraud, unauthorised access, multi-account usage, and other illicit activities that could compromise the security of all members
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support to members who may need it
• Service Communications: Sending important account notices, terms updates, security alerts, and relevant promotional information (with your consent)
• Legal Compliance: Fulfilling reporting obligations to relevant authorities where required by applicable law

Shell888 does not use your personal data to build behavioural profiles for third-party advertising, does not sell your data to advertisers, and does not use your data for any purpose not stated above without first obtaining your explicit consent.

Shell888 does not sell, rent, or share your personal data with third parties for marketing purposes. Data sharing occurs only in the following limited circumstances, and all third parties involved are required to comply with data protection standards equivalent to or exceeding those of shell888:

• Payment Service Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks — only the information required to process your specific transaction is shared with these providers. All of these providers comply with Malaysia's strict payment security standards.
• Licensed Game Providers: Evolution Gaming, Pragmatic Play, Microgaming, Playtech, and other providers whose games are available on shell888 may receive the minimum technical data required to ensure games function correctly within your account.
• Identity Verification Services: Third-party KYC service providers that assist shell888 in verifying member identity and age in line with anti-money laundering compliance requirements.
• Legal Authorities: Shell888 may be required to disclose certain data to law enforcement agencies, courts, or regulatory authorities when mandated by a court order or applicable legislation. Shell888 discloses only the minimum information necessary in such circumstances.

Shell888 continuously invests in its cybersecurity infrastructure to ensure all members' personal data is protected to the highest achievable standard. The key security measures we have in place include:

• 256-Bit SSL Encryption: All communications between your browser and shell888's servers are protected by 256-bit SSL encryption — the same standard used by Maybank, CIMB and other major Malaysian financial institutions. This means no one can intercept or read the data you send to our platform.
• Encryption of Stored Data: Sensitive personal data stored in shell888's databases is encrypted using AES-256 standards. Even in the highly unlikely event of a database breach, member data cannot be read without the corresponding encryption key.
• Strict Access Controls: Only shell888 staff with a legitimate operational need may access member data. All access is logged, monitored, and requires multi-factor authentication. Customer support staff can only view the data necessary to address your enquiry.
• 24/7 Security Monitoring: A security threat monitoring system operates around the clock to detect suspicious activity, intrusion attempts, or anomalies that may indicate a potential data breach.
• Regular Penetration Testing: Shell888 conducts regular security audits by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.
• Automatic Data Backup: Member data is automatically backed up daily to a secure, separate location to ensure full recovery in the event of an unexpected system failure.

While shell888 takes all reasonable measures to protect your data, no security system can be guaranteed to be 100% free from threats. You also play an important role in keeping your account secure — use a strong password, enable two-factor authentication (2FA), and never share your login credentials with anyone.

Shell888 uses cookies and similar technologies placed in your web browser when you visit our platform. Cookies are small text files stored on your device for technical purposes that help the platform function correctly.

The types of cookies used by shell888 are:

• Session Cookies (Essential): These cookies are required to maintain your login session while you use the platform. Without them, you would need to log in again every time you navigate to a new page on shell888. They are automatically deleted when you close your browser.
• Preference Cookies (Functional): Saving your preferences such as language settings and game display options to deliver a more personalised experience on your next visit to the shell888 platform.
• Analytics Cookies (Platform Only): Shell888 uses internal analytics to understand how members use the platform — which pages are visited most, how long a typical play session lasts, and where users encounter technical issues. This data is used solely to improve the shell888 user experience and is not shared with any advertising network.

Shell888 does not use third-party advertising cookies, Facebook or Google tracking pixels for retargeting purposes, or participate in any behavioural advertising network. If you wish to block or delete cookies, you may do so through your web browser settings — however, this may affect certain functions of the shell888 platform.

Since all transactions at shell888 involve Malaysian Ringgit (MYR) and use common Malaysian payment methods, the security of your financial data is our highest priority. shell888 accepts deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX online banking through Maybank2u and CIMB Clicks.

Here is how shell888 handles your financial data:

• Shell888 does not store your full bank account number, credit or debit card number, or digital wallet PIN or password in our systems
• All payment transactions are handled through licensed third-party payment gateways that comply with international payment security standards (PCI-DSS).
• Shell888 only retains transaction information necessary for account records — transaction amounts in MYR, payment type used (e.g. TnG, GrabPay), transaction date and time, and transaction status.
• Transaction records are retained for the period required by financial compliance and anti-money laundering regulations
• For withdrawals exceeding a certain amount, shell888 may require additional identity verification in line with KYC procedures to protect the security of your account and funds

As a shell888 member, you have clear rights regarding the personal data we hold about you. Shell888 is committed to fully respecting and facilitating the exercise of these rights:

Shell888 does not retain your personal data for longer than is necessary for the purposes for which it was collected, or longer than required by the laws and compliance obligations applicable to our platform's operations.

The retention period guidelines that apply to key data categories are:

• Active Account Data: Retained for the duration your account remains active and for 5 years after account closure to meet anti-money laundering compliance requirements
• Financial Transaction Records: Retained for a minimum of 7 years in line with applicable financial reporting and legal requirements
• KYC Verification Data: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later
• Customer Support Logs: Support conversation records are retained for 2 years for service quality and dispute resolution purposes.
• Technical Data (Server Logs): Retained for a maximum of 90 days for diagnostic and security purposes, then automatically deleted

Once the applicable retention period has ended, shell888 will permanently delete or anonymise your data in a way that makes it impossible to link back to your identity. Deletion is carried out using methods that ensure the data cannot be recovered by any party.

Shell888 reserves the right to update or amend this Privacy Policy from time to time as needed, to reflect changes in our data handling practices, new legal requirements, or improvements to our platform. The "Updated" date at the top of this document indicates when the most recent amendment was made.

For significant amendments — particularly those that materially affect how your data is used or your rights — shell888 will provide notice via email to the address registered on your account at least 7 days before the amendment takes effect. For minor technical or editorial changes, a notice will be published on shell888.best without a separate email notification.

Your continued use of the shell888 platform after any amended Privacy Policy takes effect will be considered acceptance of the revised policy. If you do not agree with any amendments, you have the right to close your account and request deletion of your data in accordance with the procedures outlined in the member rights section above.

If you have any questions or concerns, or wish to exercise any of your rights regarding personal data held by shell888, please contact us through the following channels:

• Privacy Email: support@shell888.best — for privacy-related enquiries, data access requests, and data deletion requests
• Live Chat: Available 24/7 on shell888.best — for general enquiries and urgent issues related to your account
• WhatsApp: Contact the shell888 support team for direct assistance in Bahasa Melayu

Shell888 aims to respond to all privacy-related requests within 5 business days. For more complex requests, such as comprehensive data access or data erasure requests, the process may take up to 30 business days, and we will keep you updated on the progress of your request throughout that period.

Shell888 handles all privacy-related enquiries in Bahasa Malaysia or English, according to your preference. We value the trust you place in us by entrusting your personal data to us, and we are committed to handling it in a manner that reflects that trust.