Privacy Policy – shell777

1. About This Policy

This Privacy Policy ("Policy") is issued by shell777 ("shell777", "we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data relating to individuals ("you", "Player", "User") who register for, access, or use the shell777 platform at shell777.win, including all associated services such as casino games, sports betting, live dealer tables, and financial transaction services.

shell777 is committed to protecting the privacy and personal data of all Players in compliance with applicable data protection principles and international gaming authority standards. We handle all personal data with discretion, transparency, and care. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2. Data We Collect

shell777 may collect and process the following categories of personal data:

2.1 Identity & Contact Data

• Full legal name, date of birth, nationality, and gender.
• Residential address, including city, state, and postcode.
• Email address and mobile phone number.
• Government-issued identity documents (e.g., MyKad, passport) submitted for KYC verification.

2.2 Financial Data

• Bank account details or e-wallet identifiers used for deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal requests, and MYR balances.
• Source of funds documentation where required for compliance purposes.

2.3 Technical & Usage Data

• IP address, browser type, operating system, and device identifiers.
• Login timestamps, session duration, and platform navigation patterns.
• Game history, betting activity, and wagering patterns within shell777.

2.4 Communications Data

• Records of communications between you and the shell777 support team via live chat or email.
• Responses to promotional communications, surveys, or feedback requests.

3. How We Collect Data

shell777 collects personal data through the following channels:

• Direct registration: Information you provide when creating your shell777 account, completing KYC verification, or updating your account profile.
• Transaction processing: Data received from payment providers including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and Public Bank during deposit and withdrawal processing.
• Platform interaction: Data generated automatically by your use of shell777, including gameplay activity, login records, and browsing behaviour on shell777.win.
• Cookies and tracking technologies: Data collected via cookies, web beacons, and similar technologies as described in Section 8.
• Third-party sources: Identity and fraud-screening data from KYC verification providers and sanctions screening services used to comply with anti-money laundering obligations.

4. Why We Use Your Data

shell777 uses your personal data for the following purposes:

• To create, maintain, and administer your shell777 account.
• To process deposits, withdrawals, and related financial transactions in MYR.
• To verify your identity and age (minimum 21 years) in compliance with our eligibility requirements.
• To detect, prevent, and investigate fraud, money laundering, collusion, and other prohibited activities.
• To provide customer support and respond to account queries via our 24/7 live chat and email channels.
• To personalise your shell777 experience and deliver relevant promotions, bonuses, and game recommendations where you have opted in to receive such communications.
• To comply with legal, regulatory, and licensing obligations applicable to our operations.
• To operate and improve the security, performance, and functionality of the shell777 platform.
• To enforce our Terms & Conditions and Responsible Gaming Policy.

5. Legal Basis for Processing

shell777 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the shell777 services you have registered for, including account management and transaction processing.
• Legal obligation: Processing required to comply with applicable anti-money laundering, age verification, KYC, and data retention obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have opted in. You may withdraw consent at any time by updating your communication preferences in your shell777 account settings.

6. Data Sharing & Disclosure

shell777 does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data only in the following limited circumstances:

• Payment processors: Financial data is shared with authorised payment providers (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong) solely to process your transactions.
• Game providers: Limited technical identifiers may be shared with licensed game providers (e.g., Pragmatic Play, Evolution Gaming) to deliver game content and maintain game integrity.
• KYC and compliance providers: Identity data is shared with regulated identity verification and sanctions screening providers to fulfil our age verification and anti-money laundering obligations.
• Legal and regulatory authorities: shell777 will disclose personal data to law enforcement, regulatory bodies, or licensing authorities where required by applicable law or court order.
• Group companies: Data may be shared within the shell777 corporate group for operational and compliance purposes, subject to equivalent data protection standards.

All third parties with whom shell777 shares data are contractually required to process such data only for the specified purpose and in accordance with applicable data protection standards.

7. Data Retention

shell777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and accounting obligations. As a general guideline:

• Account registration and identity data is retained for the duration of your shell777 account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of seven (7) years from the date of the transaction.
• Customer communications records are retained for three (3) years from the date of the last interaction.
• Technical and usage data, including login logs and game history, is retained for two (2) years, subject to legal hold requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with shell777's data destruction procedures.

8. Cookies & Tracking Technologies

shell777.win uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit shell777. We use the following categories of cookies:

• Strictly necessary cookies: Required for the shell777 platform to function, including session management and login authentication. These cannot be disabled.
• Performance cookies: Used to collect aggregated, anonymised data on how Players use shell777, enabling us to identify and fix performance issues.
• Functional cookies: Store your preferences (e.g., language, game lobby layout) to personalise your shell777 experience.
• Analytics cookies: Used to understand traffic patterns and user behaviour on shell777.win, helping us improve our platform.

You can manage your cookie preferences via your browser settings. Disabling certain cookies may affect the functionality of shell777. By continuing to use shell777.win, you consent to our use of cookies as described in this section.

9. Security Measures

shell777 implements comprehensive technical and organisational security measures to protect your personal and financial data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and shell777.win — the same standard used by Maybank2u, CIMB Clicks, and Public Bank online.
• Two-factor authentication (2FA) available on all shell777 player accounts.
• Real-time login monitoring and anomaly detection to identify and respond to suspicious account activity.
• Restricted internal access controls — shell777 staff access to personal data is limited on a need-to-know basis with full audit logging.
• Regular security assessments and penetration testing of the shell777 platform infrastructure.

While shell777 takes all reasonable steps to safeguard your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your shell777 login credentials and for notifying us immediately of any suspected unauthorised access to your account.

10. Your Data Rights

Subject to applicable law and our legitimate processing requirements, you have the following rights regarding your personal data held by shell777:

• Right of access: Request a copy of the personal data shell777 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data in your shell777 account.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: Request that we restrict processing of your data in certain circumstances, such as where the accuracy of the data is contested.
• Right to data portability: Receive a copy of personal data you have provided to shell777 in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: Object to processing of your personal data for direct marketing purposes at any time.

To exercise any of the above rights, please contact the shell777 support team via live chat or the contact email listed in the footer of this page. shell777 will respond to verified requests within thirty (30) days of receipt.

11. Children's Privacy

shell777 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. If shell777 becomes aware that personal data has been collected from a person under the minimum age, that data will be promptly deleted and the associated account will be permanently closed. Parents or guardians who believe that a minor has registered with shell777 should contact us immediately via live chat or support email.

12. Third-Party Links

The shell777 platform does not include links to external third-party websites. Should you navigate away from shell777.win via any means, shell777 has no control over and accepts no responsibility for the privacy practices or content of external sites. This Policy applies solely to data processed by shell777 in connection with the shell777 platform and services.

13. Policy Updates

shell777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform services, or applicable legal requirements. Material changes will be communicated to registered Players via email or a prominent notice on shell777.win no less than seven (7) days prior to the effective date. Your continued use of shell777 following notification of a material change constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by shell777, please contact our Data Protection team via:

• Live Chat: Available 24/7 on the shell777 platform — English and Bahasa Malaysia.
• Support Email: [email protected] (plain text — not a clickable link).

All privacy-related requests will be handled with the utmost confidentiality. shell777 aims to acknowledge all written data rights requests within five (5) business days and to resolve them within thirty (30) days of acknowledgement.