🔐 Shell99 Privacy Policy – Updated January 2026 🛡️ Your data is protected SSL 256-bit – standard protection by Malaysia's leading banks 📋 Compliant with PDPA 2010 – Malaysia Personal Data Protection Act 🚫 Shell99 does not sell your data to any third party ✅ Your right to review, amend & delete data – fully respected by us 🔒 All transactions MYR – TNG eWallet, DuitNow, GrabPay, FPX & more 🔐 Shell99 Privacy Policy – Updated January 2026 🛡️ Your data is protected SSL 256-bit – standard protection by Malaysia's leading banks 📋 Compliant with PDPA 2010 – Malaysia Personal Data Protection Act 🚫 Shell99 does not sell your data to any third party ✅ Your right to review, amend & delete data – fully respected by us 🔒 All transactions MYR – TNG eWallet, DuitNow, GrabPay, FPX & more

Privacy Policy · Shell99

Shell99 Privacy Policy – How We Protect the Personal Data of Malaysian Members

Shell99 takes your privacy seriously. This document transparently explains what data we collect, how it is used, who can access it, and your rights as a registered member in Malaysia. We are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA).

January 2026
Date Updated
PDPA 2010
Full Compliance
SSL 256-bit
Data Encryption
0
Sale of Data to Third Parties

By registering for or using the Shell99 platform, you consent to the collection and use of your information as described in this Privacy Policy. If you have any questions, contact us at support@shell99.biz.

256
bit SSL Encryption
PDPA
2010 Full Compliance
0
Sale of Personal Data
24/7
Security Monitoring

Shell99's Six Core Privacy Commitments

This is our promise to every Malaysian member – privacy is not just a document, it is something we practise every day

256-Bit SSL Encryption on All Data
Every piece of data you transmit to Shell99's servers — from login credentials and payment details to gaming history — is protected with 256-bit SSL encryption in transit. This is the same level of encryption used by Maybank, CIMB, and other major Malaysian banks to secure their customers' online banking transactions.
256-bit SSL · Secure Transit · Banking Standard
No Sale of Data to Third Parties
Shell99 has never sold, rented, or disclosed your personal information to any third party for marketing, advertising, or any other commercial purpose — and never will. Your data belongs to you. We use it only for the purposes clearly stated in this Privacy Policy.
0 Data Sales · No Third-Party Marketing
Full PDPA 2010 Malaysia Compliance
Shell99's Privacy Policy is designed and implemented in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have legally protected rights over your personal data, and Shell99 is legally accountable for upholding those rights.
PDPA 2010 · Your Legal Rights Protected
Your Right to Access, Amend & Delete Your Data
As a Shell99 member, you have the right to request a copy of all personal data we hold about you, request corrections to any inaccurate data, and under certain circumstances request its complete deletion. All such requests are processed within 14 working days at no charge.
Right to Access · Amend · Delete · 14 Days
Secure Servers with 24/7 Monitoring
Your data is stored on servers protected by multiple layers of physical and digital security. Our monitoring systems run 24 hours a day to detect any unauthorised access attempts. Any security incident will be reported to affected members within 72 hours, in line with industry best practices.
Secure Servers · 24/7 Monitoring
Cookies You Can Control
Shell99 uses cookies to enhance your experience and analyse platform usage. You can manage your cookie settings through your web browser at any time. We distinguish between essential cookies (required for the platform to function) and optional cookies (analytics and marketing) that you may decline without losing access to Shell99's core features.
Cookies You Can Control · Your Choice

This Privacy Policy explains how Shell99 ("Platform", "we") collects, uses, stores, and protects the personal information you provide when registering for and using our platform. This document applies to all registered users and visitors of the Shell99 platform in Malaysia. Shell99 is the data controller for your personal information and is fully responsible for its protection in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Section 1 – Personal Data We Collect

Shell99 collects several categories of information from you during registration, platform use and interactions with our services. We only collect data that is genuinely necessary to deliver a safe, fair and efficient service to you.

Information you provide directly:

  • Full name as it appears on your Malaysian identification document
  • An active Malaysian phone number (used for OTP verification)
  • An active email address
  • Date of birth (for 18+ age verification)
  • Account password (stored as an unreadable hash — Shell99 does not store passwords in plain text)
  • Identity card (MyKad) or passport details – requested only during the KYC process for certain withdrawals

Financial transaction information:

  • Deposit and withdrawal history, including amounts, dates, times, and payment methods
  • Payment account details you use – account holder name for Touch 'n Go eWallet, DuitNow, GrabPay, FPX, Boost or ShopeePay
  • Bank account numbers or wallet numbers associated with your transactions (we do not store full credit or debit card numbers)

Platform usage information collected automatically:

  • IP address and approximate location based on IP
  • Web browser type, operating system, and device type
  • Gaming history – games played, bets placed, outcomes and session duration
  • Login and logout timestamps, as well as general account activity logs
  • Cookie data and similar tracking technologies (detailed in Section 5)

Important Note: Shell99 will never ask for your bank PIN, online banking password, credit/debit card CVV number, or any other sensitive financial security information through any channel. If you receive any communication claiming to be from Shell99 that requests such information, it is a scam — do not respond and contact our support team immediately.

Section 2 – How We Use Your Data

Shell99 uses your personal data solely for legitimate purposes necessary to deliver our platform services to you. We do not use your data for any purpose unrelated to the operation of the platform without your explicit consent.

The primary purposes for which we use your data are as follows:

  • Creating and managing your Shell99 account securely
  • To verify your identity and confirm you meet our eligibility requirements (18+, Malaysian resident)
  • Processing deposits and withdrawals via your preferred Malaysian payment method
  • Delivering transaction notifications, account updates, and relevant promotional information via SMS or email
  • Providing effective customer support whenever you reach out to our team
  • Detecting and preventing fraud, money laundering and platform abuse
  • Fulfilling our legal obligations under applicable Malaysian law
  • Analysing platform usage patterns for the continuous improvement of our products and services
  • Personalising your experience based on your preferences and gaming history

If we intend to use your data for any purpose not listed above, we will seek your explicit consent beforehand. You have the right to decline without it affecting the core services you receive from Shell99.

Section 3 – Data Sharing with Third Parties

Shell99 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes. This is an unconditional commitment. There are, however, specific situations where Shell99 needs to share necessary information with certain parties in order to deliver our services to you.

Trusted service providers:

Shell99 works with a number of third-party service providers that help us operate the platform, process payments, and deliver games. These include payment gateway providers for processing transactions via Touch 'n Go eWallet, DuitNow, GrabPay, FPX, and other e-wallets, as well as game providers such as Evolution Gaming, Playtech, and SA Gaming for live casino tables.

Information shared with these providers is limited strictly to what is necessary for them to deliver their services. All third-party providers are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

Legal requirement:

Shell99 may disclose your information to the relevant authorities where required by Malaysian law, including in response to a valid warrant, court order, or official request from a law enforcement agency. In such cases, Shell99 will disclose only the minimum information requested and will notify you of the disclosure unless prohibited by law.

  • Shell99 does not share your data with third-party advertisers
  • Shell99 does not share your data with social media platforms without your consent
  • Shell99 does not sell your personal data in any form to any entity
  • Any required data sharing is governed by data processing agreements that comply with PDPA 2010
Section 4 – Data Security & Protection

Protecting your personal data from unauthorised access, loss, misuse, or alteration is a responsibility Shell99 takes very seriously. We continuously invest in our security infrastructure to ensure your data remains protected at all times in the most effective way possible.

The technical security measures Shell99 has implemented include:

  • 256-bit SSL/TLS encryption for all data transmitted between your browser and Shell99's servers
  • Passwords are stored as bcrypt hashes that cannot be decrypted — no one, including Shell99 staff, can read your password
  • Optional two-factor authentication (2FA) via SMS OTP for added login security
  • Automated 24/7 security monitoring that detects unusual activity and unauthorised access attempts
  • Sensitive data segregation — payment information is stored in an environment separate from gaming data, with distinct access controls
  • Regular security audits by independent third parties to identify and address any vulnerabilities
  • Cybersecurity training for all Shell99 staff with access to user data

While Shell99 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the unlikely event of a data breach affecting your information, Shell99 is committed to notifying you within 72 hours of becoming aware of the incident, and will take immediate remedial action.

You also play an important role in keeping your account secure. Shell99 recommends using a strong, unique password for your Shell99 account, enabling 2FA where available, never sharing your login credentials with anyone, and logging out whenever you use a shared device.

Section 5 – Cookies & Tracking Technologies

Shell99 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how our platform is used, and deliver more relevant content to you. Cookies are small text files stored in your web browser when you visit the Shell99 platform.

Types of cookies Shell99 uses:

  • Essential cookies (cannot be disabled): Required for the platform to function properly. This includes login session cookies that keep you signed in as you browse, security cookies that prevent CSRF attacks, and cookies that store your language preferences.
  • Performance & analytics cookies (optional): We use analytics tools to understand how members use the platform — which pages are visited most, how long a typical session lasts, and where traffic comes from. This data is collected in aggregated, anonymised form.
  • Functional cookies (optional): Saving your preferences — such as your frequently used betting limits, favourite games, and display settings — to make your experience more comfortable.

You can manage and delete cookies through your web browser settings. Please note that disabling essential cookies may affect platform functionality — for example, you may need to log in again each time you visit a new page. For instructions on managing cookies in your browser (Chrome, Firefox, Safari, Edge), please refer to your browser's help section.

Section 6 – Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data that Shell99 is obligated to respect and facilitate. All requests relating to these rights are processed within 14 business days at no charge.

Right of Access
You have the right to request a copy of all personal data Shell99 holds about you. We will provide a complete report in a readable format within 14 business days.
Right to Rectification
If any personal data we hold about you is inaccurate or outdated, you have the right to request an immediate correction. You can update basic details such as your email address and phone number directly through your account settings.
Right to Erasure ("Right to be Forgotten")
Under certain circumstances, you have the right to request the deletion of your personal data. Please note that Shell99 may be required to retain certain records for periods mandated by law (for example, financial transaction records for anti-money laundering compliance).
Right to Object to Processing
You have the right to object to the use of your data for certain purposes, such as direct marketing or analytics. Opting out will not affect your access to Shell99's core services.
Right to Data Portability
You have the right to receive your personal data in a structured, machine-readable format, which you may transfer to another service provider of your choice.

To exercise any of the rights above, contact Shell99 by email at support@shell99.biz with the subject line "Data Privacy Rights Request". Please state the type of request and include your registered phone number for identity verification. We will respond within 3 business days with an action plan.

Section 7 – Data Storage & Retention Period

Shell99 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law. Once the data is no longer needed, we will securely delete or permanently anonymise it.

  • Active account data: Retained for as long as your Shell99 account remains active
  • Game history: Retained for 12 months from the date of each session (accessible by you in your account)
  • Financial transaction records: Retained for 7 years in accordance with Malaysian financial and anti-money laundering legal requirements
  • Live casino session recordings: Retained for a minimum of 90 days for dispute resolution purposes
  • Support communication logs: Retained for 2 years for reference and service improvement
  • Closed accounts: Minimum personal information is retained for 5 years after closure for compliance purposes; the remainder is deleted

All stored data is protected to the same security standards as active data. Shell99 follows strict and secure data deletion procedures to ensure that data no longer required is disposed of in a manner that cannot be recovered.

Section 8 – Children's Privacy & Age Restriction

The Shell99 platform is strictly reserved for individuals aged 18 and above. Shell99 does not knowingly collect, store or process any personal data belonging to individuals under the age of 18. This is not merely a privacy policy — it is a legal requirement and a moral commitment that Shell99 upholds without exception.

All new account registrations go through an age verification process. If Shell99 detects or is notified that we have collected information from an individual under the age of 18, we will take immediate action to:

  • Suspend the account in question immediately
  • Deleting all personal data belonging to that individual from our systems
  • Refunding any funds that were deposited into the account
  • Investigating how this occurred and strengthening our age verification process

If you are a parent or guardian and believe that your child under the age of 18 has registered an account on Shell99, please contact us immediately at support@shell99.biz with the relevant account details. We will respond within 24 hours and take all necessary immediate action.

Section 9 – Privacy Policy Amendments

Shell99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technological developments, new legal requirements, or other legitimate reasons. Any changes will be published on the Shell99 website with a revised effective date at the top of this document.

For amendments that involve material changes to how we use your personal data — for example, if we begin sharing data with a new category of third parties, or use data for new purposes inconsistent with the current Privacy Policy — Shell99 will:

  • Sending email notifications to all registered members at least 14 days before the changes take effect
  • Displaying a clear notice within the platform when you log in
  • Seeking your consent again if required by law

Your continued use of the Shell99 platform after an amendment is published (and following any applicable notice period) will be considered your acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data in accordance with the procedure set out in Section 6.

The current version of this Privacy Policy is dated January 2026. Previous versions of the Privacy Policy are available upon request through customer support for reference.

Section 10 – Contact Us Regarding Privacy

If you have any questions, concerns, or complaints about how Shell99 handles your personal data, or if you wish to exercise any of the privacy rights outlined in Section 6, please contact Shell99's privacy team through the following channels:

  • Dedicated privacy email: support@shell99.biz (use the subject line "Data Privacy Enquiry")
  • 24-hour live chat on the Shell99 platform — request to speak with the privacy team
  • All privacy enquiries will receive a response within 3 business days
  • Data rights requests (access, rectification, deletion) are processed within 14 business days

If you are unsatisfied with how Shell99 has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital. Shell99 will cooperate fully with any investigation conducted by the relevant regulatory authority.

Privacy Quick Reference
Data Encryption SSL 256-bit
Legal Compliance Malaysia PDPA 2010
Sale of Data to Third Parties Never
User Age Requirement 18 Years and Above
Rights Request Processing Time 14 Business Days
Privacy Enquiry Response Time 3 Working Days
Transaction Record Retention 7 Years (Statutory)
Live Casino Recording Retention Minimum 90 Days
Material Amendment Notice 14 Days Before Taking Effect
Date Updated January 2026
Shell99 Privacy Protection
SSL 256-bit Active
All data is transmitted over encrypted connections that cannot be intercepted
PDPA 2010 Compliant
Full compliance with Malaysia's Personal Data Protection Act across all operations
Monitored Secure Servers
24/7 security monitoring with real-time incident response
Strict Access Controls
Only authorised personnel with a legitimate business need may access sensitive data
Related Documents
Terms & Conditions

Full terms of use for the Shell99 platform, covering deposits, withdrawals and bonuses

Responsible Gaming

Deposit limits, session limits, cool-off periods, and self-exclusion options

About Shell99

The story, mission, and core values behind the Shell99 platform since 2019

FAQ

Answers to the most frequently asked questions by Shell99 members

FAQ – Shell99 Privacy Policy

Frequently asked questions from members about privacy and data protection at Shell99

Shell99 is required to share limited information with game providers such as Evolution Gaming, Playtech and SA Gaming to enable you to play at their tables. The information shared typically includes your username or player ID, your gaming wallet balance, and a log of each bet for game integrity purposes. More sensitive personal information such as your phone number, email address, full address or payment details is not shared with game providers. All game providers that Shell99 works with are companies that have been operating for over 15 years and are bound by strict data confidentiality agreements with Shell99.

Shell99 does not have access to the internal details of your Touch 'n Go eWallet or DuitNow account. Payments are processed through a secure payment gateway, and Shell99 only receives the information needed to confirm that a payment was successful — namely the transaction status (success/failed), amount, and transaction reference number. Shell99 does not store the full phone number linked to your wallet or any of your wallet login credentials. You will never be asked to enter your wallet login details on any Shell99-owned page — all payment processing takes place within the secure environment of the respective payment provider.

To request the deletion of your personal data, send an email to support@shell99.biz with the subject line "Data Deletion Request" and include the phone number registered to your account for identity verification. Shell99 will process your request within 14 business days. Please note that there are legal limits to this right — Shell99 is required under Malaysian law to retain financial transaction records for 7 years for anti-money laundering compliance purposes, even after an account has been closed. These records cannot be deleted before the stipulated period. Other personal information not subject to such legal requirements may be fully deleted upon your request.

If you close your account at your own request, Shell99 will initiate the data reduction process within 30 days of all financial matters being settled (final balance withdrawal, etc.). Personal information not subject to statutory retention requirements will be deleted or anonymised. Financial transaction records will be retained for 7 years as required by law. For accounts inactive for more than 24 consecutive months, Shell99 reserves the right to close the account and follow the same data reduction procedure. You will receive an email notice before any action is taken on your inactive account, giving you the opportunity to respond if you wish to keep it.

Your Privacy Rights at Shell99 – Summary

Under Malaysia's PDPA 2010, you have the following rights, which Shell99 is committed to upholding

Right to Access Data

Request a copy of all personal data Shell99 holds about you. Processed within 14 business days, at no charge.

Right to Rectification

Request corrections to any inaccurate or outdated data. Basic information can be updated directly in your account settings.

Right to Erasure

Request the deletion of your personal data under certain circumstances. Financial records are retained as required by law.

Right to Object to Processing

Opt out of having your data used for direct marketing or analytics without affecting your core service.

Right to Portability

Receive your personal data in a structured, portable format that can be transferred to another service provider.

Right to Lodge a Complaint

File a complaint with Shell99 or the Department of Personal Data Protection Malaysia if your privacy rights have been violated.

To exercise any of the rights above, contact us at support@shell99.biz

Your Data Is Safe with Shell99

Shell99 believes trust is the foundation of any good relationship between a platform and its users. We have never sold your data, and we never will. We protect it with the strongest encryption available. We respect your rights under Malaysian law. Register with confidence — your privacy is in good hands.

Shell99 Privacy Guarantee
256-bit SSL encryption on all data
No data sold to any party
Full compliance with Malaysia's PDPA 2010
Your rights to access, amend & delete your data are protected
24/7 server security monitoring
Privacy enquiries responded to within 3 business days
Register Free – Takes < 2 Minutes

🔞 18+ only · Privacy Policy applies · Shell99

Bahasa Melayu