shell777 Privacy Policy — How We Protect Your Data

1. Introduction

Shell777 operates Malaysia's premier online gaming platform, providing sports betting, live casino, slots, baccarat, and esports wagering services to adult players across Malaysia. In the course of providing these services, shell777 necessarily processes personal data about our members and platform visitors.

Shell777 recognises that privacy is a fundamental right. We are committed to handling your personal information responsibly, transparently, and in compliance with applicable data protection regulations. This Policy sets out, in clear terms, exactly what information shell777 collects, the purposes for which it is used, and the rights you hold over your personal data.

This Policy applies to all personal data processed by shell777 in connection with: account registration and management; financial transactions and KYC verification; gaming activity and betting history; customer support interactions; and marketing communications (where consent has been given).

2. Personal Data We Collect

Shell777 collects the following categories of personal data:

a) Identity & Contact Data

• Full legal name as it appears on your Malaysian IC (MyKad) or passport;
• Date of birth and nationality;
• Residential address (including city — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, etc.);
• Email address and mobile phone number;
• Government-issued identity document number.

b) Financial Data

• Payment method details (Touch n Go eWallet account, Boost account, bank account numbers for Maybank, CIMB, Public Bank, RHB, etc.);
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment references;
• Bonus redemption history and wagering records.

c) Gaming Activity Data

• Bet history, game history, and session logs;
• Account balance history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

d) Technical & Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, browser type and version;
• Login timestamps and session duration;
• Cookie and tracking identifiers (see Section 9).

e) Communications Data

• Records of your communications with shell777 customer support;
• Feedback, survey responses, and complaint records;
• Promotional communication preferences and opt-in/opt-out records.

3. How We Collect Your Data

Shell777 collects personal data through the following means:

• Direct provision by you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey;
• Automated technical collection — through cookies, server logs, and analytics tools as you interact with the shell777 platform;
• Third-party sources — identity verification services and fraud prevention databases consulted during KYC processing; payment processors confirming transaction details; and, where applicable, publicly available information to verify identity;
• Inferred data — shell777 may derive certain analytical data (such as game preferences or betting patterns) from your actual activity on the platform, for the purposes of personalisation and responsible gaming monitoring.

4. How We Use Your Personal Data

Shell777 uses your personal data only for legitimate, specified purposes. The primary purposes for which we process your data are:

• Account management: Creating, maintaining, and securing your shell777 account, authenticating logins, and managing account settings;
• Service delivery: Processing bets, settling game outcomes, managing your MYR balance, and delivering the gaming services you have requested;
• Financial processing: Processing deposits, withdrawals, and refunds; preventing payment fraud; conducting anti-money laundering (AML) checks;
• Identity verification (KYC): Verifying that you meet shell777's age (21+) and eligibility requirements in compliance with applicable gaming regulations;
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling patterns; administering deposit limits, session limits, and self-exclusion tools;
• Customer support: Responding to your enquiries, complaints, and support requests;
• Legal and regulatory compliance: Fulfilling obligations under applicable gaming authority regulations, AML legislation, and data protection law;
• Security and fraud prevention: Detecting and investigating suspicious account activity, bonus abuse, multi-accounting, and other prohibited conduct;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent, and always with the option to opt out at any time.

5. Legal Basis for Processing

Shell777 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered member — including account management, game delivery, and payment processing;
• Legal obligation: Processing required to comply with applicable gaming authority regulations, AML legislation, KYC requirements, and data retention obligations imposed by law;
• Legitimate interests: Processing necessary for shell777's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by your rights;
• Consent: Processing for marketing communications and optional analytics — only where you have given explicit, freely-given, and revocable consent.

6. Data Sharing & Disclosure

Shell777 does not sell your personal data. We share your data with third parties only in the following limited circumstances:

• Payment processors: Your financial data is shared with payment service providers (e.g., Touch n Go, Boost, Malaysian bank payment gateways) strictly to process your transactions;
• Identity verification providers: Your identity documents are processed by licensed KYC verification service providers to confirm your eligibility;
• Game software providers: Certain technical session data may be shared with game providers to deliver game content and resolve disputes;
• Regulatory authorities: Shell777 may be legally required to disclose personal data to gaming regulators, law enforcement agencies, or financial intelligence units in connection with regulatory reporting or investigation obligations;
• Fraud prevention services: Shell777 participates in industry fraud and self-exclusion databases to protect the platform and its members;
• Professional advisers: Data may be shared with legal, accounting, or compliance advisers under strict confidentiality obligations.

All third-party service providers engaged by shell777 are contractually bound to process your data only for the specified purpose, maintain appropriate security standards, and not retain data beyond what is necessary.

7. Data Retention

Shell777 retains personal data only for as long as is necessary for the purposes outlined in this Policy, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Active account data: Retained for the duration of your active shell777 membership;
• Transaction and KYC records: Retained for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory record-keeping requirements;
• Customer support records: Retained for three (3) years following resolution of the relevant matter;
• Marketing preference records: Retained until you withdraw consent or close your account;
• Self-exclusion records: Retained permanently to prevent circumvention of responsible gaming tools.

When personal data is no longer required and no legal obligation to retain it exists, shell777 will securely delete or anonymise it.

8. Data Security

Shell777 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and shell777's servers;
• Encrypted storage of sensitive data including passwords (hashed and salted) and payment information;
• Two-factor authentication (2FA) available to all account holders;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the shell777 platform infrastructure;
• Real-time anomaly detection to identify and block suspicious access attempts.

9. Cookies & Tracking Technologies

Shell777 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function — enabling login sessions, security tokens, and payment processing. These cannot be disabled;
• Performance & analytics cookies: Used to understand how members use the Platform — page visit data, session duration, feature engagement — in aggregate anonymised form to improve the shell777 experience;
• Functional cookies: Remembering your preferences such as language, preferred game category, and responsible gaming settings;
• Marketing cookies: Used only where you have consented, to serve relevant promotional content about shell777. You may opt out of marketing cookies at any time via your account settings.

You may configure your browser to block or delete cookies, but doing so may affect the functionality of certain shell777 features, including login persistence and personalised game recommendations.

10. Your Data Rights

As a shell777 member, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]:

Shell777 will respond to data subject requests within 30 calendar days. Where a request is complex or we receive a high volume, we may extend this period by a further 60 days with prior notification. We will not charge a fee for reasonable requests but reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

11. Minors & Age Restriction

Shell777 does not knowingly collect or process the personal data of any person under the age of 21 years. The shell777 platform is strictly for adults aged 21 and above. Age verification is a mandatory step during KYC for all accounts.

If shell777 discovers that personal data has been collected from a person under 21 years of age, we will immediately terminate that account, delete all associated personal data, and report the incident to the relevant responsible gaming authority as required.

Parents and guardians who believe a minor may have registered on shell777 should contact [email protected] immediately.

21+  Strictly for adults aged 21 and above. Shell777 enforces mandatory age verification for all accounts.

12. International Data Transfers

Shell777 may transfer your personal data to service providers or infrastructure located outside Malaysia (including, for example, cloud hosting providers or identity verification services). Where such transfers occur, shell777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law and international best practice.

Safeguards employed for international data transfers include: contractual data processing agreements with third-party providers incorporating standard data protection clauses; and use of third-party providers that maintain internationally recognised security certifications.

13. Amendments to This Policy

Shell777 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable regulatory requirements. When material changes are made, we will notify registered members via the platform announcement system or by email prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will be revised whenever changes are made. We encourage you to review this page periodically. Your continued use of shell777 following any amendment to this Policy constitutes your acceptance of the revised terms.

14. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data shell777 holds about you, please contact our data team:

For responsible gaming queries including self-exclusion and limit-setting, please visit shell777.club/responsible-gaming. All responsible gaming requests are handled with strict confidentiality.