Shell999 Privacy Policy — Member Personal Data Protection Transparent & Responsible Malaysia

Shell999 is a Sports Betting, Live Casino, e-sports, lottery and virtual sports platform operating for users in Malaysia via shell999.best. We understand that privacy is more than just a word — it is the trust you place in us when you register as a member and use our services.

This Privacy Policy applies to all users of the shell999 platform, including website visitors, registered members and former members. It covers all information collected through shell999.best, the shell999 mobile app, email and live chat communications, and any other interactions with shell999 services.

Shell999 only collects data necessary to provide the services you use and to ensure the platform operates safely and in compliance with legal requirements. We do not collect data beyond what is needed. The categories of data shell999 collects are as follows:

Registration & Identity Data:

• Full name as stated on your official Malaysian identification document (MyKad or passport).
• Date of birth for age verification.
• An active Malaysian phone number.
• A valid email address.
• Passwords are stored in hashed form that cannot be read by anyone, including shell999 staff.

Financial & Transaction Data:

• Deposit and withdrawal records, including payment methods used (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u, CIMB Clicks).
• Betting history including matches wagered on, amounts, odds and outcomes.
• Current wallet balance and balance movement history.
• Transaction reference numbers for customer support and dispute purposes.

Platform Usage & Technical Data:

• Your IP address, device type, operating system, and web browser type.
• Pages you visit within the shell999 platform, visit times and session duration.
• Actions you take within the platform, such as bets viewed, added to the bet slip, or cancelled.
• Login data including the date, time and approximate location (based on IP) for account security purposes.

Identity Verification (KYC) Data:

• A copy of your MyKad or passport submitted during the identity verification process.
• A selfie for facial verification if required.
• Proof of address such as a recent utility bill or bank statement, if requested.

All data collected by shell999 is used for the following purposes, each directly related to the provision of the services you use:

Shell999 processes your personal data on valid legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and applicable related legislation. The following outlines the legal basis that applies to each type of data processing we carry out:

• Contract Performance: Data processing necessary to provide the betting services you have requested — including account management, bet processing and withdrawal of winnings.
• Legal Obligation: Data processing required to comply with applicable Malaysian law, including anti-money laundering (AML) requirements, customer identity verification (KYC), and reporting to the relevant authorities where necessary.
• Legitimate Interest: Data processing for the purposes of fraud prevention, platform security and service improvement — where those interests do not override your fundamental rights and freedoms.
• Consent: Data processing for marketing communications and promotional content, where you have given explicit consent that may be withdrawn at any time.

Shell999 will not sell, rent or disclose your personal data to third parties for marketing purposes without your express consent. However, in the course of operating the platform, there are certain situations where shell999 may need to share your data with selected third parties:

• Payment Service Providers: Payment gateways that handle your deposit and withdrawal transactions (including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX providers) receive the data necessary to process those transactions. They are bound by strict data protection agreements with shell999.
• KYC Service Providers: Third-party identity verification companies that assist shell999 in verifying member identities in accordance with AML/KYC requirements may process your identification document data. All such providers are licensed entities subject to strict data protection laws.
• Legal Authorities: Shell999 will disclose data to the relevant Malaysian authorities when required to do so by law, court order, or a directive from a legitimate authority — for example, in cases involving money laundering investigations or financial fraud.
• Technology Providers: Technical infrastructure providers — such as cloud computing and cybersecurity services that support shell999's platform operations — may have limited access to data for technical purposes only, under strict confidentiality agreements.

Shell999 continuously invests in security technology and procedures to protect your personal data from unauthorised access, alteration, disclosure or destruction. The security layers we have in place are:

While shell999 takes all reasonable security measures, no system can guarantee 100% security at all times. We ask that you also play your part in protecting your account — use a strong and unique password, never share your login credentials with anyone, enable two-factor authentication where available, and notify us immediately if you suspect any suspicious activity on your account.

Shell999 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or for as long as required under applicable Malaysian law. The following data retention guidelines govern our practice:

• Active account data: Retained for as long as your account is active and for a period of 5 years after account closure, in accordance with Malaysia's AML legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and taxation legal requirements.
• Betting history: Retained for 5 years from the date the bet was placed, for the purposes of dispute resolution, customer support, and legal compliance.
• KYC documents (MyKad, passport): Retained for the duration of the active account period plus 5 years after account closure.
• Technical & security logs: Retained for 12 months for security and fraud detection purposes.
• Customer support communications: Retained for 3 years from the date of last communication.

When your data is no longer needed, shell999 will securely delete it or permanently anonymise it using procedures that ensure it cannot be recovered.

As a shell999 member in Malaysia, you have the following rights regarding your personal data processed by our platform:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will process this request within 21 business days from the date the request is received.
• Right to Rectification: If you find that data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic account data can be updated directly from your shell999 account profile page.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances — for example, when the data is no longer needed for its original purpose or when you withdraw the consent on which the processing was based. However, this right does not apply where shell999 is required by law to retain that data.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes — including any profiling carried out in connection with such marketing. An objection can be raised at any time and will be acted upon immediately.
• Right to Restriction of Processing: In certain situations, you have the right to request that shell999 temporarily restrict the processing of your data while an issue is being resolved — for example, during a dispute about data accuracy.
• Data Portability: You may request the personal data you have provided to shell999 in a structured, machine-readable format for transfer to another service provider where applicable.

To exercise any of the rights above, please contact the shell999 customer support team via live chat or email support@shell999.best, stating your request and account details for identity verification. Shell999 will process all privacy rights requests within the timeframe prescribed by Malaysian law.

Shell999 uses cookies and similar tracking technologies on our platform. Cookies are small text files stored on your device when you visit shell999.best. They help us deliver a better user experience and maintain the security of your session.

Types of cookies shell999 uses:

You can manage your cookie preferences through the cookie panel that appears on your first visit to shell999.best, or through your web browser settings. Please note that disabling optional cookies will not affect your ability to use the core functions of the shell999 platform.

The shell999 platform is strictly for individuals aged 18 and above. shell999 does not knowingly collect or process personal data from individuals under the age of 18. If you believe that an underage person has registered a shell999 account, please contact us immediately at support@shell999.best so we can take the appropriate remedial action, including closing the account and deleting all associated data.

Shell999 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, updates to Malaysian data protection law, or changes to the services we offer. The date of the most recent update will always be displayed at the top of this page.

For material changes — that is, changes that significantly alter how we collect, use or protect your data — shell999 will notify you via an in-platform notification or your registered email at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of the shell999 platform.

For any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by shell999, please reach out to us through the following channels:

• Live Chat: Available directly on the shell999 platform — for privacy enquiries requiring an immediate response, this is the fastest option.
• Email: support@shell999.best — for formal requests relating to privacy rights such as data access, correction or deletion, please use email and include "Personal Data Request" in the subject line.

Shell999 is committed to handling all privacy-related enquiries and requests with seriousness, transparency, and within the stipulated timeframe. For data access or deletion requests, processing takes up to 21 business days from the date the request is received and verified. For general enquiries about the Privacy Policy, a response is typically provided within 3 business days.