🔒 Privacy & Data Security

Privacy Policy Shell77 – Member Personal Data Protection

Shell77 is committed to protecting the privacy and data security of every member's personal information. This document transparently explains how we collect, use, store and protect your information.

Last Updated: 1 January 2026

Six Pillars Privacy Protection Shell77

Privacy at Shell77 is not merely a written policy — it is a core value that shapes every technical and operational decision we make in managing member data.

🔐

256-bit SSL Encryption

All data transmitted between your device and Shell77's servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

🚫

No Sale of Data to Third Parties

Shell77 has never and will never sell, rent or trade members' personal data to any third party for marketing or commercial purposes without your consent.

🗄️

Secure Data Storage

Your data is stored on servers protected by multi-layered security systems with strict access controls. Only authorised personnel may access member data.

👁️

Full Transparency in Data Use

We only collect data that is genuinely necessary for platform operations and clearly state the purpose of each data category collected in this policy.

Full Control in Members' Hands

You have the right to access, correct, download or request deletion of your personal data at any time through your account settings or by contacting our support team.

📱

Mobile Access Security

The Shell77 mobile app uses two-factor authentication (2FA) and local data encryption to keep your account secure even if your device is lost or stolen.


1

Introduction to Shell77's Privacy Policy

Shell77 takes the protection of members' personal data with the utmost seriousness. This Privacy Policy is drafted to clearly and transparently explain how we collect, process, store and protect your personal information when you use the Shell77 platform, including the website shell77.vip, the mobile app and all related services.

This document applies to all users of the Shell77 platform — whether you are a visitor just exploring our website, an active registered member, or anyone interacting with any of our service channels. By using the Shell77 platform, you agree to the data collection and processing practices described in this policy.

Shell77 complies with all applicable data protection laws, including the Malaysia Personal Data Protection Act 2010 (PDPA). We continuously strive to improve our privacy practices in line with technological developments and evolving legal requirements.

This policy is written in plain, easy-to-understand language by design. We believe every member has the right to know exactly what happens to their data — not just through fine print that nobody reads.

2

Personal Data We Collect

Shell77 only collects personal data that is genuinely necessary to provide, improve and protect our services. We do not collect excessive or irrelevant data. Below are the categories of data we collect and the purpose behind each:

Data Category Examples of Information Purpose of Collection
Identity Data Full name, date of birth, identity card number Identity verification (KYC), fraud prevention
Contact Data Phone number, email address Communications, account verification, customer support
Financial Data Bank name, account number (partial), transaction records Deposit and withdrawal processing, AML compliance
Technical Data IP address, device type, web browser, operating system Account security, fraud detection, platform optimisation
Usage Data Game records, wagering history, session duration Service improvement, responsible gaming compliance
Cookie Data Session cookies, preference cookies, analytics cookies Improved user experience, platform analytics

Shell77 never stores full credit or debit card numbers. All card payment information is processed directly by trusted payment processors and does not pass through our servers.

3

How We Use Your Personal Data

Every piece of data collected by Shell77 is used for a specific and legitimate purpose. We do not process your data for undisclosed purposes without first obtaining your additional consent. The following are the primary purposes for which your data is used:

  • Providing, operating and maintaining member accounts and Shell77 platform services
  • Processing deposits, withdrawals and all financial transactions securely and efficiently
  • Verifying member identities through the KYC process to meet legal requirements and prevent fraud
  • Sending important account-related communications such as transaction confirmations, security notices and policy updates
  • Providing effective customer support and resolving member complaints or enquiries
  • Detecting and preventing fraudulent activity, money laundering and platform abuse
  • Analysing usage patterns to improve user experience and platform performance
  • Sending promotional offers and bonus information — only if you have opted in to receive them
  • Complying with all legal and regulatory obligations applicable to platform operations

Shell77 does not use your personal data to make automated decisions that could materially affect your rights or interests without appropriate human review.

4

Data Sharing with Third Parties

Shell77 does not sell, rent or disclose members' personal data to third parties for their own commercial marketing purposes. However, there are limited situations where data sharing is necessary for the operation of our platform:

  • Trusted Service Providers — Payment processors, licensed game providers, and technical infrastructure providers that assist us in operating the platform, subject to strict confidentiality agreements
  • Regulatory Authorities — Government bodies or regulatory authorities that require specific information as part of our legal compliance obligations
  • Law Enforcement Agencies — When required by a valid court order or applicable legal process
  • Business Transfers — In the event of a merger, acquisition, or asset sale, member data may be transferred to the receiving entity — and you will be notified in advance

Every third-party service provider working with Shell77 is required to sign a data processing agreement ensuring they protect member information to the same standard we uphold.

5

Shell77 Data Security Measures

Protecting members' personal data is a core technical and operational priority at Shell77. We continuously invest in security infrastructure to keep your data safe from both internal and external threats.

  • Data encryption in transit using TLS 1.3 protocol and 256-bit SSL encryption
  • Encryption of data at rest for all sensitive records stored in our databases
  • Role-based access control (RBAC) — only staff with a legitimate job requirement may access member data
  • Continuous security auditing and monitoring by our internal information security team
  • Regular penetration testing conducted by independent third-party security firms
  • Tested and documented security incident response procedures
  • Mandatory cybersecurity awareness training for all Shell77 staff

While we take all reasonable precautions, no security system can guarantee 100% protection. In the event of a security incident involving your data, shell77 will notify you within the timeframe required by applicable law and take immediate remedial action.

6

Cookies and Tracking Technologies

Shell77 uses cookies and similar tracking technologies to enhance user experience, maintain platform security and understand how members use our services. The following are the types of cookies we use:

  • Essential Cookies — Required for core platform functions such as login sessions and security. These cookies cannot be disabled as the platform will not function properly without them
  • Preference Cookies — Saves your preferences such as language and display settings for a more convenient return visit
  • Analytics Cookies — Helps us understand how members interact with the platform so we can continuously improve the overall user experience
  • Security Cookies — Used to detect suspicious activity, prevent fraud, and protect your account from unauthorized access

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the Shell77 platform. Continued use of our platform after the cookie notice is displayed is considered your consent to the use of cookies described here.

Shell77 does not use third-party advertising cookies or cross-site tracking technologies to monitor your online activity outside our platform.

7

Data Retention Period

Shell77 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The following are our general data retention guidelines:

  • Active account data — retained for as long as the account remains active and for a defined period after account closure
  • Financial transaction records — retained for a minimum of seven years to comply with Malaysia's financial and tax legal requirements
  • KYC records and identity verification — retained for a minimum of five years after the business relationship ends, in compliance with AML legislation
  • Customer support communication logs — retained for three years for reference and complaint resolution purposes
  • Security and audit logs — retained for two years for security incident investigation purposes
  • Anonymised analytics data — may be retained longer as it no longer contains individually identifiable information

Once the retention period expires, your personal data will be securely deleted or fully anonymised using procedures that comply with accepted information security standards.

8

Member Rights Regarding Personal Data

As a Shell77 member, you have the following rights regarding your personal data under the Malaysia Personal Data Protection Act 2010 and our privacy policy:

👁️
Right of Access

Request a copy of the personal data we hold about you at any time

✏️
Right to Rectification

Requesting correction of inaccurate or incomplete data held in our records

🗑️
Right to Erasure

Requesting deletion of your personal data, subject to our legal obligations

Right to Object

Objecting to the processing of your data for specific purposes such as direct marketing

📤
Right to Data Portability

Receiving your data in a structured format for transfer to another service provider

⏸️
Right to Restriction

Requesting a restriction on the processing of your data in certain situations while an investigation is ongoing

To exercise any of the above rights, you may contact the shell77 privacy team via email at [email protected] or through our 24/7 live chat. We will process your request within 30 calendar days from the date of receipt.

9

Cross-Border Data Transfers

In operating the Shell77 platform, there are situations where members' personal data may need to be transferred to or processed in other countries, particularly in relation to technical infrastructure service providers and international game providers we work with.

Shell77 ensures that any cross-border data transfer is carried out with adequate safeguards, including:

  • Ensuring that recipient countries maintain a level of data protection comparable to or higher than Malaysia
  • Requiring legally binding data processing agreements with all cross-border partners
  • Applying standard contractual clauses approved by the relevant data protection authorities
  • Ensuring that data transferred is the minimum necessary for the stated purpose

While your data may be processed outside Malaysia in certain circumstances, the level of protection you enjoy under the shell77 privacy policy remains consistent regardless of where the data is processed.

10

Privacy Complaints and How to Contact Us

Shell77 takes every privacy and personal data protection complaint seriously. If you have concerns about how we manage your data, or wish to exercise any of the rights set out in this policy, there are several ways to contact us:

  • Privacy Email: [email protected] — for enquiries and requests relating to personal data
  • Live Chat: Available 24/7 via the chat icon on our website for immediate responses
  • FAQ Section: Visit our FAQ page for answers to the most frequently asked privacy questions

We aim to acknowledge receipt of your complaint within three business days and provide a full response within 30 calendar days. For more complex cases requiring in-depth investigation, we will keep you updated on the progress of your case on a regular basis.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body in your jurisdiction.

Shell77's privacy team consists of dedicated professionals fluent in both Malay and English. We ensure every enquiry receives the attention it deserves and is answered in a clear, easy-to-understand manner.


Your Data, Our Responsibilities

In today's digital world, personal data is an incredibly valuable asset. Every time you register on an online platform, you entrust a portion of your personal information to that platform. Shell77 does not take that trust lightly.

We understand that as a Malaysia user, you may have legitimate concerns about how your data is used by online platforms. Stories of data breaches, sale of personal information, and misuse of user data are all too common. That is why we have written this privacy policy in clear, plain language — not in legal jargon that is hard to digest.

Shell77's approach to privacy starts at the system design stage, not as an afterthought. The concept of "privacy by design" means every new feature, every new process and every new system we build begins with the question: "How does this design protect our members' privacy?" This is not just good practice — it is a core value embedded in the way we operate.

Shell77 also recognises that a good privacy policy alone is not enough — consistent and accountable implementation is what sets a platform that truly protects privacy apart from one that merely holds a well-written policy document. We conduct regular privacy audits and remain open to member feedback on how we can do better in protecting your data.


🔒 Secure & Trusted Platform

Play with Peace of Mind at Shell77 — Your Privacy is Fully Protected

Now that you understand how Shell77 protects your personal data, register an account today and enjoy a safe, fair and enjoyable gaming experience with the Shell77 member community across Malaysia.

Bahasa Melayu