Official shell99 Documents

Privacy Policy Shell99 – Malaysia Player Data Protection

Shell99 takes every member's privacy seriously. This Privacy Policy clearly explains how we collect, use, store and protect your personal data when you use the Shell99 platform. Written for the full understanding of our Malaysian players.

Updated: January 2026
This policy covers:
  • Data we collect
  • How your data is used
  • Data sharing with third parties
  • Data protection & security
  • Your rights as a data subject
256-bit SSL Encryption

All personal data and financial transactions on Shell99 are protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banks, including Maybank and CIMB.

No Sharing Without Consent

Shell99 does not sell, rent, or share your personal data with any third party for marketing purposes without your explicit prior consent.

Minimum Required Data

Shell99 only collects data that is strictly necessary to operate our services — your name, Malaysian phone number, email, and payment information for deposits and withdrawals only.

Full User Control

You have the right to access, correct, transfer, or request the deletion of your personal data from Shell99's systems at any time through our customer support.

Written in Bahasa Malaysia

Shell99's Privacy Policy is written entirely in clear, plain language — not confusing legal jargon or awkward machine-translated text.

Malaysian Legal Compliance

Shell99 fully complies with all applicable personal data protection provisions in Malaysia, including the Personal Data Protection Act 2010 (PDPA).

This Privacy Policy is effective from 1 January 2026. The latest version will always be displayed on this page.

Welcome to Shell99's Privacy Policy page. This document explains in detail how Shell99 — accessible at shell99.click — collecting, using, storing, protecting, and disclosing your personal data when you register for and use our platform. By registering an account or using Shell99's services, you agree to the collection and use of data as described in this Privacy Policy.

1Introduction & Shell99's Privacy Commitment

Shell99 is an online entertainment platform operating in Malaysia and catered exclusively to Malaysian players. We understand that trust is the foundation of a strong relationship between a platform and its players — and that trust begins with how we handle your personal data: responsibly, transparently, and with respect.

This Privacy Policy is written in accordance with internationally recognised privacy principles and adapted to meet Malaysian legal requirements, specifically the Personal Data Protection Act 2010 (Malaysia PDPA). We are committed to:

  • Only collecting data that is strictly necessary to operate Shell99's services.
  • Using your data only for the purposes stated in this policy.
  • Protecting your data with appropriate technical and organisational security measures.
  • Not sharing your data without your consent, except in circumstances required by law.
  • Giving you meaningful control over your own personal data.

Quick Summary: Shell99 does not sell your data. We do not share your information without good reason. Your data is used solely to enable you to play and enjoy the Shell99 platform safely and smoothly.

2Personal Data We Collect

Shell99 collects your personal data in several ways depending on how you interact with our platform. The following are the categories of data we collect:

Data You Provide Directly:

  • Registration information: Full name, Malaysian phone number, email address, and account password upon registration.
  • Identity verification (KYC) information: National identity card number (MyKad) or passport number, copies of identity documents, and a selfie photo for identity verification when required prior to withdrawal processing.
  • Payment information: Details of the payment methods you have registered, such as your Touch 'n Go eWallet phone number, GrabPay account, Boost, ShopeePay, DuitNow account number, or FPX banking details (Maybank2u, CIMB Clicks). Shell99 does not store full credit or debit card numbers — this sensitive information is processed directly by licensed payment providers.
  • Support communications: Records of your conversations with the Shell99 customer support team via live chat, Telegram, or email.

Automatically Collected Data:

  • Platform usage data: Games played, bets placed, login and logout times, platform sections visited and duration of use.
  • Device and technical data: IP address, browser type, device operating system, screen size, and other technical information that helps us ensure the platform works correctly on your device.
  • General location data: The state or city from which you access the platform, based on your IP address, to ensure appropriate services are provided to players in Malaysia.
  • Cookie and session data: Login session information and technical cookies required for the platform's core functions. See Section 8 for more details on cookies.
Data Category Example Requirements
Identity Name, phone number, email Mandatory
KYC Documents MyKad, passport For withdrawals
Payments TNG, GrabPay, DuitNow, FPX Mandatory
Platform Usage Games played, bets placed Automatic
Technical IP address, device type Automatic

3How Shell99 Uses Your Data

Shell99 uses the personal data collected solely for the following purposes:

  • Account management: Creating, verifying, and managing your Shell99 account, including secure login and two-factor authentication.
  • Transaction processing: Processing deposits in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to the payment method registered to your account.
  • Provision of gaming services: Enabling you to access and play all games available on Shell99 — slots, live casino, baccarat, table games, poker, football betting, badminton, lottery and more.
  • Customer support: Responding to enquiries, resolving technical issues, and providing assistance via live chat, Telegram, or email in Bahasa Malaysia.
  • Identity verification (KYC): Verifying your identity before processing withdrawals that exceed a certain threshold, as a fraud prevention and legal compliance measure.
  • Security and fraud prevention: Detecting and preventing suspicious activity, multiple account usage, payment fraud, and other security threats to your account and the shell99 platform as a whole.
  • Service communications: Sending important notifications about your account, policy changes, security information, and lottery or betting result announcements.
  • Platform improvements: Analysing aggregated usage patterns (without identifying individuals) to understand which features are most useful and to improve the overall user experience.
  • Legal compliance: Fulfilling applicable legal and regulatory obligations, including maintaining transaction records as required by Malaysian law.

Shell99 does not use your data to make automated decisions that carry significant legal consequences for you without human involvement.

4Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), Shell99 processes your personal data on the following legal bases:

  • Consent: By registering a Shell99 account and agreeing to this Privacy Policy, you consent to the processing of your personal data for the stated purposes. You may withdraw this consent at any time, though doing so may require the closure of your account.
  • Contract performance: Processing required to deliver the Shell99 services you have requested — including handling deposits and withdrawals in MYR, and providing access to games.
  • Legitimate interests: Processing required for Shell99's legitimate interests, such as fraud prevention and platform security, provided those interests do not override your fundamental rights and freedoms.
  • Legal obligation: Processing required to meet applicable legal obligations, including anti-money laundering (AML) requirements and financial reporting requirements.

5Data Sharing with Third Parties

Shell99 does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data may be shared with third parties only under the following limited circumstances:

  • Technical service providers: Companies that help us operate the Shell99 platform — such as cloud computing service providers, email service providers and platform analytics tool providers. All such providers are bound by strict data protection agreements and are only permitted to use your data for purposes we specify.
  • Licensed payment providers: Licensed payment entities that process your deposit and withdrawal transactions in MYR — including payment gateway providers supporting Touch 'n Go eWallet, GrabPay, DuitNow, and FPX. Only the minimum data necessary to complete a transaction is shared.
  • Game providers: Gaming software providers may receive the minimum data necessary to verify player eligibility and prevent fraud within their games.
  • Legal obligation: Where Shell99 is required by law, court order, or directive from Malaysian authorities to disclose specific data, we will do so strictly within the scope of that request.
  • Protection of Shell99's interests: In cases involving fraud, illegal activity, or serious security threats, Shell99 may disclose relevant data to the appropriate authorities to protect the platform and other players.

In all instances of legitimate data sharing, Shell99 shares only the minimum data strictly necessary and ensures that recipients are subject to appropriate data protection obligations.

6Security & Data Protection

Shell99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

  • Data encryption in transit: All data transmitted between your device and Shell99's servers is protected by 256-bit TLS/SSL encryption — the same standard used by Malaysian online banking.
  • Encryption of data at rest: Sensitive data stored in Shell99's databases is protected with AES-256 encryption to prevent exposure in the event of a data breach.
  • Strict access controls: Access to players' personal data within Shell99's internal systems is restricted solely to staff who require it to perform their duties, and all access is logged and monitored.
  • Continuous security monitoring: The shell99 system is continuously monitored for suspicious activity and intrusion attempts, with established security incident response procedures in place.
  • Regular security audits: The Shell99 platform undergoes regular security audits and penetration testing by independent third parties to identify and address any security vulnerabilities.
  • Fund segregation: Player funds are held in accounts separate from shell99's operational funds, ensuring your money remains secure under all circumstances.

While Shell99 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a security incident involving your personal data, Shell99 will notify you and the relevant authorities in accordance with the notification obligations prescribed under Malaysian law.

7Data Retention Period

Shell99 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or for as long as required by Malaysian law:

  • Active account data: For as long as your Shell99 account remains active. If your account has been inactive for more than 24 consecutive months, we may reach out to confirm whether you wish to keep it open.
  • Financial transaction records: A minimum of seven (7) years following each transaction, in accordance with Malaysia's accounting and financial legal requirements.
  • Identity verification records (KYC): A minimum of five (5) years following account closure, in accordance with Malaysia's anti-money laundering legal requirements.
  • Customer support records: Three (3) years following each support interaction, for reference and resolution of any disputes that may arise.
  • Log and security data: Six (6) months for standard access logs, and up to two (2) years for logs related to ongoing security investigations.

Once the retention period has lapsed and there is no legal requirement to retain the data, Shell99 will securely delete or anonymise your personal data in accordance with established procedures.

8Cookies & Tracking Technologies

Shell99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the Shell99 website.

Types of cookies used by Shell99:

  • Essential cookies: Required for core platform functionality — including maintaining your login session, remembering your language preference and ensuring the platform operates correctly. These cookies cannot be disabled as they are essential to the platform's operation.
  • Performance cookies: Collecting aggregated information on how visitors use the Shell99 platform to help us identify areas for improvement. This data does not identify individual users.
  • Functionality cookies: Remembering your preferences such as favourite games, display settings and notification choices to provide a more personalised experience.

You can manage or disable cookies through your browser settings. However, disabling necessary technical cookies may affect the functionality of the Shell99 platform and prevent you from logging in or using certain features.

9Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Shell99:

Right of Access

You have the right to request a copy of the personal data Shell99 holds about you. Such requests will be processed within 21 business days.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request that shell99 correct or complete it.

Right to Erasure

Under certain circumstances, you have the right to request that Shell99 delete your personal data, subject to legal record-keeping obligations.

Right to Object

You have the right to object to the processing of your personal data for specific purposes, including direct marketing.

Data Portability Rights

You have the right to receive your personal data in a machine-readable format for transfer to another operator if you wish.

Right to Withdraw Consent

You may withdraw your consent to data processing at any time, though this may require the closure of your Shell99 account.

To exercise any of the above rights, please contact the Shell99 support team via live chat or email at support@shell99.click. We will process your request within the stipulated timeframe and inform you of the action taken.

10Children's Privacy & Minor Protection

Shell99 strictly does not accept registrations from individuals under the age of 21. The Shell99 platform is intended exclusively for adults. Shell99 does not knowingly collect personal data from minors.

If Shell99 discovers that personal data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child may have registered a Shell99 account are urged to contact us immediately via support@shell99.click.

Age Restriction: Shell99 is strictly for players aged 21 and above. If you suspect use by an underage individual, please contact Shell99 support immediately.

11Privacy Policy Amendments

Shell99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. When significant changes are made, Shell99 will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending in-platform notifications to all active members about important changes.
  • In the case of highly significant changes, we may request your fresh consent before the amendment takes effect.

You are encouraged to review this Privacy Policy page periodically. Your continued use of the Shell99 platform after any amendments are published constitutes your acceptance of the updated policy.

12Contact Shell99's Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Shell99 handles your personal data, please contact our team:

Live Chat

Fastest response — 24/7 in Bahasa Malaysia.

Telegram

Reach the Shell99 support team via Telegram.

Official Email

Support@shell99.click for privacy enquiries.

Shell99 will endeavour to respond to all privacy-related enquiries within 21 working days. For formal complaints, please clearly indicate that your email relates to a "Privacy Complaint" in the subject line to help us process it efficiently.

Your Privacy is Shell99's Priority — Not Just a Formality

In today's digital world, most people are all too familiar with lengthy, tedious privacy notices that nobody ever reads. Shell99 takes a different approach. This Privacy Policy is not just a legal document we're obligated to have — it is a genuine agreement between Shell99 and our players about how your personal data will be handled with the respect and responsibility you deserve.

When you register a Shell99 account with your Malaysian phone number, full name, and email address, you are entrusting us with your personal information. Shell99 takes that trust seriously. Your registration details are used solely to manage your account securely and seamlessly — for safe logins, to reach you if there are any account issues, and to process deposit and withdrawal transactions in MYR.

Payments are an area where privacy and security matter most. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), your transaction details are processed through encrypted channels by licensed payment providers. Shell99 does not store your full credit or debit card details — only the information needed to identify your payment method for the purpose of processing withdrawals.

Many players ask whether Shell99 monitors their gaming activity. The answer is yes — but not for the reasons you might be concerned about. Records of the games you play, the football or badminton bets you place, and the 4D lottery tickets you purchase are stored in your account as a transaction history that you can review yourself at any time. This information is also used by Shell99 to detect any unusual activity that may indicate your account has been accessed without authorisation, or to prevent fraudulent activity that could affect other players on the platform. This data is not sold to advertisers, not shared with game providers for profiling, and not used to manipulate your gaming experience in any way.

Regarding cookies — shell99 uses technical cookies that are necessary for the platform to function properly. These include session cookies that keep you logged in during gameplay so you do not need to re-enter your password repeatedly, as well as cookies that remember your display settings. We do not use third-party advertising tracking cookies that follow you across other websites. When you close your browser after a shell99 gaming session, session cookies are automatically deleted.

Shell99 fully respects your rights as a data subject under Malaysia's PDPA. If you want to know what data we hold about you, you can request it and we will provide a copy within 21 working days. If any information is inaccurate, let us know and we will correct it. If you wish to close your account and have your data deleted, we will do so in accordance with the applicable record-keeping obligations under law — most of which exist to protect you as much as Shell99.

Shell99 also takes active steps to ensure data security. The 256-bit SSL encryption we use is more than just a number — it means that data transmitted between your phone or computer and Shell99's servers is protected by an encryption system that would take billions of years to crack with current computing power. This is the same standard used by Malaysia's leading banks to secure your online banking transactions.

Ultimately, the best privacy policy is one players never have to worry about. If you play on Shell99 with peace of mind and no concerns about your personal data — that is a success for us. We will continue working to ensure that your trust in Shell99 on matters of privacy is fully well-founded and justified. Should you have any questions or concerns, our team is available 24/7 in Bahasa Melayu via live chat, Telegram or email at support@shell99.click.

PDPA Compliance & Shell99's Privacy Commitment

Shell99 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This Privacy Policy is updated periodically to reflect changes in legislation and industry best practices. All data is processed, stored and protected in accordance with the standards set by the PDPA and applicable regulatory requirements.

If you believe Shell99 has violated your privacy rights, you are entitled to file a complaint with Malaysia's Department of Personal Data Protection (JPDP), provided you have first attempted to resolve the matter directly with Shell99.

For privacy enquiries or complaints, please contact us at support@shell99.click or read Terms & Conditions for broader context.

Shell99 – Safe, Transparent & Licensed

Officially Licensed
SSL 256-bit
PDPA Compliance
24/7 Support
Pay in RM
Bahasa Melayu
Join Shell99 with Confidence

Your Data is Safe at Shell99 – Register Today

With your privacy protected, bank-grade encryption, and a transparent policy in place, play at Shell99 with complete confidence. Enjoy more 1,000 games, deposits via Touch 'n Go or DuitNow, and full support in Bahasa Melayu. Minimum deposit from as low as RM10.

Register a Free Account Log In to Account
Secure, licensed & PDPA compliant
Bahasa Melayu