Shell77 Privacy Policy – Data Protection for Malaysian Players

Shell77 collects two main categories of information: information you provide directly to us, and information collected automatically when you use the platform.

Information you provide directly:

• Registration information: Full name, MyKad or passport number, date of birth, mobile number, and an active email address.
• Identity verification information (KYC): Copies of identity documents, a selfie with the document, and in some cases, proof of address such as a utility bill or bank statement.
• Financial information: Bank account numbers, e-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow), and transaction records for deposits and withdrawals.
• Contact our support team: Live chat conversation records, emails you have sent to support@shell77.best, and feedback you have provided.
• Account preferences and settings: Deposit limits you set yourself, notification preferences, and your responsible gaming settings.

Automatically collected information:

• Technical data: IP address, device type, operating system, browser version, and screen resolution.
• Session data: Login and logout times, playing session duration, and pages visited within the shell77 platform.
• Game data: Betting history, game types played (slots, Live Casino, Sports Betting including Malaysia Super League, badminton, roulette), and win/loss statistics.
• Geolocation data: Country and region of access based on IP address, for eligibility verification and security purposes.
• Cookies and similar tracking technology data: For more details, please refer to Section 5 on Cookies in this Privacy Policy.

Shell77 uses collected personal information solely for legitimate purposes that are directly relevant to delivering the platform's services. Below is a complete list of the purposes for which Shell77 uses your data:

Shell77 does not use your personal data to make automated decisions that significantly affect you without human involvement. Any account-related decisions — such as suspensions or verifications — involve a manual review by the Shell77 team.

Shell77 does not sell or disclose your personal data to third parties for marketing purposes. However, there are specific situations where Shell77 needs to share data with trusted parties to keep the platform running properly:

• Payment service provider: Licensed payment processors that handle your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay. They receive only the information necessary to process each transaction.
• Gaming software provider: Companies such as Pragmatic Play, Habanero, Microgaming, and others receive minimal game session data to ensure games function correctly and jackpots are credited accurately.
• Security and identity verification service provider: Third-party companies that assist Shell77 with KYC processes and fraud prevention, bound by strict confidentiality agreements.
• Legal authorities: Shell77 is required to disclose certain data when ordered to do so by a court, regulatory body, or legitimate law enforcement authority following proper legal procedures.
• Professional advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations, where required for compliance or legal purposes.

Shell77 continually invests in the latest security technologies and procedures to keep your personal data protected at all times. Below are the security layers we have in place:

• Encryption in transit: All communications between your device and shell77's servers are protected by TLS 1.3 with AES-256 encryption — no data is transmitted in plain text over the internet.
• Data-at-rest encryption: Sensitive data such as passwords, banking information, and KYC documents are stored in encrypted form in shell77's database. Even shell77's internal staff cannot view the actual value of your password.
• Tiered access controls: Only shell77 staff with a legitimate operational need are permitted to access member data, and every instance of access is automatically logged and monitored.
• Two-factor authentication (2FA): Available to all member accounts and mandatory for Shell77 staff accounts with access to sensitive data.
• 24/7 monitoring: A round-the-clock intrusion detection system that identifies and blocks any unauthorised access attempts.
• Regular security audits: Shell77 undergoes regular independent security audits conducted by accredited third-party cybersecurity firms.
• Incident response plan: Shell77 has clear procedures in place to handle any data security incidents, including notifying affected members within a defined timeframe.

While shell77 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every cyber threat. You also play an important role in keeping your account safe — use a strong password, never share your login credentials with anyone, and contact shell77 support immediately if you suspect any suspicious activity on your account.

Shell77 uses cookies and similar tracking technologies to enhance the user experience and enable essential platform functions to operate correctly. Cookies are small data files stored on your device when you visit the Shell77 platform.

Types of cookies Shell77 uses:

• Essential cookies (required): Required for core platform functions such as login session authentication, security, and basic preferences. Without these cookies, the shell77 platform cannot function properly. These cookies cannot be disabled.
• Performance cookies (analytics): Collects anonymous information about how visitors use the Shell77 platform — including the most frequently visited pages, time spent, and navigation paths. This data helps Shell77 improve the platform's design and functionality.
• Functional cookies: Stores your preferences such as selected language, last betting limit used, and display settings. This allows Shell77 to deliver a more personalised experience.
• Session cookies: Automatically deleted when you close your browser. Used to maintain your login session while playing on shell77.

You can manage cookie settings through your browser preferences. Please note that disabling certain types of cookies may affect the functionality and gaming experience on the Shell77 platform. For step-by-step guidance on managing cookies in popular browsers (Chrome, Firefox, Safari, Edge), please contact the Shell77 support team.

Shell77 acknowledges and respects your rights in relation to your personal data. The following are the rights you hold as a Shell77 member:

Shell77's services are intended for individuals aged 18 and above only. Shell77 does not knowingly collect or process personal data from individuals under the age of 18.

If you are a parent or guardian who has discovered that your child has registered an account on shell77 while underage, please contact us immediately at support@shell77.best. We will take prompt action to close the account, delete all associated data, and refund any deposits that were made.

Shell77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal requirements. The following are general guidelines for shell77's data retention periods:

• Active account data: Retained for the duration your account remains active on Shell77, plus the minimum period required by law following account closure.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with applicable Malaysian financial and tax laws.
• KYC documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in accordance with anti-money laundering legal requirements.
• Support communication records: Retained for 3 years from the date of communication for reference and dispute resolution purposes.
• Log and security data: Retained for 12 months for the purposes of security incident detection and investigation.
• Cookie data: Depending on the type of cookie — session cookies are deleted when the browser is closed, while persistent cookies have a set expiry period (typically between 30 days and 12 months).

Once the applicable retention period has elapsed, Shell77 will securely and permanently delete or anonymise your data from our systems, subject to any legal requirements that may necessitate longer retention in certain circumstances.

Shell77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or member feedback. When material changes are made to this Privacy Policy, Shell77 will:

• Updating the "Last updated" date at the top of this document.
• Sending email notifications to all registered Shell77 members outlining the key changes made.
• A clear notice will be displayed within the shell77 platform at least 14 days before any amendment takes effect.

Continued use of the Shell77 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the new terms. If you do not agree with any amendments, you have the right to close your account before they take effect by contacting the Shell77 support team.

It is your responsibility to review this Privacy Policy from time to time. The latest version is always available on this page and can be accessed at any time.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Shell77 handles your personal data, please reach us through the following channels:

• Live Chat: The fastest method — available 24/7 directly within the Shell77 platform. Our support agents speak Bahasa Melayu and will respond in under 3 minutes.
• Privacy Email: support@shell77.best – for privacy-related enquiries that require additional information or documentation. Responses are typically provided within 24–48 hours.

When contacting Shell77 regarding privacy matters, please clearly state that your enquiry relates to the Privacy Policy or your personal data rights. This helps our team direct your query to the most appropriate person to provide effective and accurate assistance.

Shell77 values every piece of privacy-related feedback and is committed to addressing all concerns seriously and professionally. Your privacy is not merely a legal obligation to us — it is the foundation of trust that underpins the relationship between Shell77 and the more than 200,000 Malaysian players who rely on us every day.