Updated: 1 January 2026 256-bit SSL Bahasa Melayu

Privacy Policy Shell99 – How We Protect the Personal Data of Malaysian Members

Shell99 respects the privacy of every member and takes our responsibility to protect your personal data seriously. This document clearly explains how we collect, use, store, and safeguard your information when you use the Shell99 platform.

Important Note: By registering for and using the Shell99 platform, you agree to this Privacy Policy in full. If you do not agree with any part of it, please stop using the platform and contact us to close your account. This policy applies to all Shell99 members in Malaysia.

Document Information
Policy Version

V3.1 – Effective 1 January 2026

Jurisdiction

Malaysia – applicable to all members accessing shell99 from Malaysia

Security Standards

256-bit SSL — banking-grade encryption for all Shell99 data

Applicable Legislation

Personal Data Protection Act 2010 (PDPA) Malaysia

Privacy Enquiries

Support@shell99.best – response within 24 business hours

Shell99's Six Privacy Commitments to Malaysian Members

The key things you need to know about how Shell99 protects your information

Your Data Is Never Sold to Anyone

Shell99 has never sold, rented, or leased member personal information to any third party for marketing or commercial purposes, and never will. Your data belongs to you — we only use it for the purposes clearly stated in this privacy policy.

Full Data Access & Correction Rights

As a Shell99 member, you have the right to access all personal data we hold about you, request corrections if there are any errors, and apply for data deletion under certain circumstances. These requests will be processed within 14 business days through Shell99's support channels.

Compliant with Malaysia's PDPA 2010

Shell99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means all collection, processing and storage of members' personal data is carried out within the applicable Malaysian legal framework — not merely as an internal policy.

Secure & Limited Data Storage

Shell99 member data is stored on servers protected by strict access controls. Only staff who require access for operational purposes are authorised to read this data. All internal access is logged and audited regularly to ensure there is no misuse.

Communication Preferences Control

You can control the types of communications you receive from shell99 – whether promotional emails, platform notifications or SMS. You may unsubscribe at any time through your shell99 account settings or by contacting our support team directly.

1

Personal Data Shell99 Collects

To provide a safe and complete betting service to Malaysian members, Shell99 needs to collect certain categories of personal data. We only collect information that is genuinely necessary for operational purposes — nothing more.

Below are the categories of data shell99 collects, along with examples of the information involved:

Data Category Example Information Mandatory / Optional
Identity Information Full name, national identification number (MyKad), date of birth, gender, identity card image Mandatory (KYC)
Contact Information Malaysian mobile number, email address, residential address Mandatory
Account Data Username, password (encrypted), login history, account settings Mandatory
Financial Data Deposit and withdrawal records (MYR), payment methods (Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay), transaction history Mandatory
Betting Activity Data Betting history, game types (football, cricket, Live Casino, slots), selected markets, wins and losses Automatic
Technical Data IP address, device type, operating system, web browser, cookie data, platform access logs Automatic
Communications Data Live Chat conversation records, support emails, feedback submitted to shell99 During interactions

Security Note: Shell99 never stores credit card numbers or passwords in plain text. All sensitive information is encrypted using AES-256 encryption before being stored in Shell99's secured databases.

2

How shell99 Collects Your Data

Shell99 collects your personal data through several different channels over the course of your use of our platform. Here's exactly where your data comes from:

  • Account registration: Information you provide when registering a new shell99 account, including your name, email, phone number and password.
  • KYC verification: The identity document (MyKad or passport) you submit for age and identity verification as required by Shell99.
  • Financial transactions: Data generated each time you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, or ShopeePay, and each time you submit a withdrawal request for your winnings.
  • In-platform activity: Data recorded automatically while you use Shell99 – including pages you visit, football or cricket matches you watch, bets you place, and casino games you play.
  • Device and connection: Technical details about the device you use to access shell99, including IP address, browser type and operating system.
  • Support interactions: Records of your conversations with the Shell99 support team via Live Chat, WhatsApp, or email.
  • Voluntary updates: Additional information you voluntarily provide, such as address updates, a new phone number or feedback submitted to shell99.

Shell99 does not purchase data lists from third parties or collect information about you from public sources without your knowledge. Every piece of data we hold comes directly from your interactions with the Shell99 platform.

3

How Your Personal Data Is Used

Shell99 uses the personal data collected solely for legitimate and necessary purposes in order to provide the best betting experience to Malaysian members. The specific purposes are as follows:

  • Account management: To create, verify and manage your shell99 account, including the KYC process, secure login and account recovery.
  • Transaction processing: To process deposits in MYR (RM) via local payment methods and settle your winnings withdrawals to your Malaysian e-wallet or bank account.
  • Service provision: To give you full access to all Shell99 features including Sports Betting (Malaysian Super League football, EPL, cricket, badminton, e-sports), Live Casino, slots, and VIP rewards programme.
  • Security and fraud prevention: To detect and prevent fraudulent activity, account abuse, money laundering and violations of Shell99's terms.
  • Legal compliance: To fulfil Malaysian legal requirements including PDPA 2010, anti-money laundering (AML) obligations and applicable regulatory reporting requirements.
  • Customer support: To resolve your enquiries, complaints, and requests via Live Chat, WhatsApp, and Shell99 support email.
  • Platform improvements: To analyse usage patterns at an aggregate level (not individual) in order to improve the overall shell99 interface and user experience.
  • Promotional communications: To send you relevant information about Shell99 promotions, bonuses, and offers — subject to the communication preferences you have set in your account.
  • Responsible gambling: To monitor betting patterns and reach out to you if the shell99 system detects any concerning signs related to unhealthy betting behaviour.

Purpose Limitation Principle: Shell99 will not use your data for any purpose beyond those stated above without first obtaining fresh consent from you or notifying you through an update to this privacy policy.

4

Sharing Data with Third Parties

Shell99 does not sell or disclose members' personal data to third parties for their marketing purposes. However, there are limited situations where shell99 is required to share certain data with other parties for legitimate operational reasons:

  • Payment service providers: Shell99 shares necessary transaction information with providers such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay to process your deposits and withdrawals. These providers are bound by their own strict security and privacy policies.
  • Game software providers: Certain game session data (not full personal information) is shared with Live Casino and slots software providers for game operation and dispute resolution purposes.
  • Legal authority: Shell99 will disclose data where required by Malaysian law, court order, or a lawful request from law enforcement authorities in connection with criminal investigations such as fraud or money laundering.
  • Audit and compliance: Independent auditors and relevant compliance bodies may access certain data within the scope of Shell99's audit and operational compliance work — subject to strict confidentiality agreements.

In all data sharing scenarios listed above, Shell99 ensures that receiving parties are bound by equivalent data protection obligations. We do not permit any third party to use Shell99 members' data for their own purposes beyond the approved scope.

No Data Sales – Shell99's Absolute Commitment

Shell99 is fully committed: members' personal information will not be sold, rented or exchanged for commercial value with any third party. This is not merely a policy – it is a core principle of how we operate.

5

Data Storage & Retention Period

Shell99 members' personal data is stored on servers protected by strict physical and digital access controls. All data is encrypted using AES-256 encryption at rest and 256-bit SSL encryption in transit.

How long Shell99 retains your data depends on the data category and applicable legal requirements:

  • Active account data: Retained for the duration of your Shell99 account's active period and up to 7 years after account closure — in accordance with Malaysian financial legal requirements.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with the Anti-Money Laundering Act (AMLA) and applicable Malaysian financial regulations.
  • KYC records (identity documents): Retained for the duration of account activity and 7 years after account closure for compliance purposes.
  • Betting history: Retained for 5 years for customer support, dispute resolution, and responsible gaming analysis.
  • Technical log data: Retained for 12 months for security and fraud detection purposes.
  • Support communication records: Retained for 3 years for service quality and dispute resolution purposes.

Once the retention period expires, data is securely deleted or anonymised in accordance with approved data disposal procedures. If you request the closure of your Shell99 account, the data deletion process will be initiated once all legal obligations have been fulfilled.

6

Cookies & Tracking Technologies

Like most digital platforms, shell99 uses cookies and similar tracking technologies to enhance your experience. This is standard practice – virtually every website and app you use on a daily basis employs the same technology.

The types of cookies shell99 uses are as follows:

  • Essential cookies: Required for the Shell99 platform to function properly. These include login session cookies, security tokens and language preferences. These cookies cannot be disabled without affecting core platform functionality.
  • Performance cookies: Collecting information on how you use shell99 – the most frequently visited pages, time spent in each section and any error messages encountered. This data is used to improve platform performance.
  • Functional cookies: Stores your personal preferences such as favourite football market types, display language and account display settings for a more personalised Shell99 experience.
  • Security cookies: Helps Shell99 identify suspicious activity and protect your account from unauthorised access.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect shell99 platform functionality, including the ability to log in and process bets. shell99 recommends keeping essential and security cookies enabled for the best and most secure experience.

Important: Shell99 does not use third-party cookies for targeted advertising or marketing purposes. We do not share cookie data with any advertising networks or social media platforms.

7

Your Rights as a shell99 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Shell99's privacy policy, you have the following rights regarding your personal data:

Data Access Rights

You have the right to request a copy of all personal data Shell99 holds about you. Requests will be processed within 14 business days.

Right to Rectification

If the data we hold is inaccurate or outdated, you have the right to request prompt correction through your account settings or shell99 support.

Right to Erasure

In certain circumstances, you may request deletion of your data from Shell99's systems — subject to applicable legal retention obligations.

Right to Object to Processing

You have the right to object to your data being used for Shell99 promotional marketing communications at any time through your account settings.

Right to Data Portability

You may request your data in a machine-readable format for the purpose of transferring it to another relevant platform.

Right to Restrict Processing

In the event of a dispute or review, you may request that shell99 temporarily suspend the processing of your data while the matter is being resolved.

To exercise any of the above rights, contact the shell99 privacy team by email at support@shell99.best with the subject line "PRIVACY RIGHTS REQUEST – [Your Account Number]". Please include your full name, shell99 account number and the specific right you wish to exercise. shell99 will acknowledge receipt of your request within 3 business days and resolve it within 14 business days.

8

Protection of Minors' Data

Shell99 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from any individual under the age of 18.

All shell99 members are required to complete an age verification (KYC) process before full access is granted. Should shell99 discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, the following steps will be taken immediately:

  • The account in question will be frozen immediately.
  • All personal data belonging to the individual concerned will be permanently deleted from Shell99's systems.
  • Any deposited funds will be returned via the original payment method.
  • The matter will be reported to the relevant authorities if required.

Parents or guardians who are concerned about their child potentially accessing shell99 are encouraged to contact shell99 support immediately for assistance.

9

Changes to the Privacy Policy

Shell99 reserves the right to update this Privacy Policy from time to time to reflect changes in how we operate, new legal requirements or improvements to our data protection practices.

When material changes are made to this privacy policy, Shell99 will notify you via:

  • A notification email to the address registered on your shell99 account at least 7 days before the changes take effect.
  • In-platform notifications on shell99 while you are logged in.
  • Update the "Last Updated" date at the top of this document.

Continued use of the Shell99 platform after the effective date of any changes constitutes acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account and request a withdrawal of your balance before the changes take effect.

Shell99 recommends that you review this Privacy Policy page periodically to stay informed about how we handle your personal data.

10

Contact Shell99 Regarding Privacy

If you have any questions, concerns or complaints regarding how Shell99 handles your personal data, our team is ready to assist through a range of channels:

Official Privacy Email

Support@shell99.best – for written complaints and privacy rights requests. Response within 24 business hours with a case reference number.

Shell99 Live Chat

For general privacy enquiries. Available 24/7 within the Shell99 platform with a response time of under 2 minutes.

WhatsApp Support

Support available in Malay and English. WhatsApp number accessible within the Shell99 platform after logging in.

Operating Hours

24 hours a day, 7 days a week, 365 days a year – including all Malaysian public holidays without exception.

If you believe that shell99 has violated your privacy rights and are unsatisfied with the resolution we have proposed, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010 (PDPA). shell99 will cooperate fully with any investigation conducted by the relevant authorities.

Officially Licensed
256-bit SSL
PDPA Compliant
24/7 Support
Data Not Sold
Member Rights Guaranteed

FAQ – Shell99 Privacy Policy

Frequently asked questions from members about privacy and data security

Yes, shell99 uses 256-bit SSL and AES-256 encryption to protect all documents submitted to us. The KYC (identity verification) process is an industry-standard requirement on all legitimately licensed betting platforms – it is not unusual. Your ID documents are accessed only by shell99's specially trained compliance team for verification purposes and are stored in a secure, restricted-access environment. Your documents will not be shared with any party without valid legal grounds.

Yes, you have the right to request data deletion under Malaysia's PDPA 2010. However, please note that Shell99 has a legal obligation to retain financial transaction records for a minimum of 7 years under Malaysian financial and anti-money laundering laws. This means transaction records cannot be deleted within that period, even if you request account closure. Other data not subject to legal retention obligations can be deleted upon request. Contact support@shell99.best with the subject line "DATA DELETION REQUEST" to initiate this process.

Yes, Shell99 sends emails about promotions, bonuses, and new offers to members who agreed to receive them at registration. You can opt out of promotional emails at any time in two ways: first, log in to your Shell99 account, go to Account Settings, then Communication Preferences, and disable any options you no longer want. Second, click the "Unsubscribe" link found at the bottom of any Shell99 promotional email. Please note that important account-related emails – such as transaction confirmations, security notifications, and terms updates – cannot be turned off, as they are essential to the security of your account.

All financial transactions on Shell99 are protected by 256-bit SSL encryption in transit. Shell99 does not store your full bank account or e-wallet details in our systems — we only retain reference tokens provided by payment service providers (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay) for recurring transaction processing. This means that even in the event of a security threat, your full financial details cannot be compromised as they are never stored on our end. All transactions also go through additional verification from payment providers for an extra layer of security.

Your betting history on Shell99 is confidential information accessible only to you (via the "Betting History" section in your account) and designated Shell99 staff who require it for customer support, dispute resolution, or legal compliance purposes. Internal Shell99 staff access to member data is automatically logged and audited to ensure no access occurs without a legitimate reason. Shell99 does not disclose your betting history to family members, employers, or any other party without a valid court order or your explicit consent.

Shell99 has a comprehensive incident response plan to handle any data security breaches that may occur. In the event of a breach involving member personal data, Shell99 is committed to: (1) identifying and containing the breach as quickly as possible, (2) notifying affected members within 72 hours of confirmed breach via email and in-platform notifications, (3) reporting to the Personal Data Protection Commissioner of Malaysia where required by law, and (4) taking appropriate remedial action including resetting potentially compromised passwords. Shell99 also conducts regular security testing to identify and address vulnerabilities before they can be exploited.

Responsible Gaming & Your Privacy

Shell99 uses your betting data for more than just operational purposes — we also monitor activity patterns to identify members who may benefit from responsible gaming support. This is a purposeful use of data to protect your wellbeing. All such information is handled in strict confidence and is not shared with anyone outside Shell99's qualified compliance team.

Smart Pattern Monitoring

Shell99 uses your activity data responsibly to identify concerning betting patterns and offer timely support when needed.

Limits You Control

Deposit limits and play time settings in your Shell99 account are your own preferences — we use them solely to enforce the limits you set for yourself.

Confidential Self-Exclusion

If you apply for self-exclusion or a break from Shell99, this information is kept strictly confidential and will not be disclosed to any third party.

Wellbeing Data Protected

Any information related to responsible gaming that you share with Shell99 is protected under our highest level of confidentiality.

Need help or support? Contact Talian Kasih 15999 (24 hours, free of charge) or visit Responsible Gaming page Shell99 for more information.

Play on Shell99 with Your Privacy Protected

Your data is safe with us. Register with Shell99 today and enjoy the best football betting, cricket, Live Casino, and slots experience with complete peace of mind.

Welcome bonus of up to RM1,000 for new members. Minimum deposit of RM20 via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX.

256-bit SSL Secure Data Not Sold 18 Years and Above
Bahasa Melayu