Official Documents

Privacy Policy Shell66 – Malaysia Member Personal Data Protection

Shell66 values the privacy of every member. This document details how we collect, use, store, and protect your personal information while you use our platform.

Last Updated: 1 January 2026

1 Introduction

Shell66 is committed to protecting the privacy of every individual who uses our online casino platform. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information when you browse the shell66 website, use our mobile app, or interact with any of our services.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adhere to internationally recognised data protection standards. Every shell66 staff member who handles member personal data is required to comply with our strict internal policies.

Our Commitment: Shell66 never sells, rents, or trades members' personal data to third parties for marketing or commercial purposes. Your trust is our most valuable asset.

By continuing to use the shell66 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision of this policy, you should not use shell66's services.

2 Types of Personal Data We Collect

Shell66 only collects personal data necessary for platform operations, legal compliance, and improving the user experience. The following are the categories of data we collect:

Data Category Example Information Requirements
Identity Information Full name, MyKad/passport number, date of birth, selfie photo Required (KYC)
Contact Information Phone number, email address, residential address Required
Financial Information Bank account number, bank name, transaction history Required (payment)
Usage Data Game history, login timestamps, devices used Automatic
Technical Data IP address, browser type, operating system, cookie data Automatic

We do not collect sensitive information such as medical data, biometric information (except photos for KYC), or your political and religious affiliations.

3 How We Collect Data

Your personal data is collected through various channels within the shell66 ecosystem. We ensure every collection method is transparent and compliant with applicable laws.

  • Account Registration: Information you provided when first creating your shell66 account
  • KYC Process: Identity verification documents you upload to complete your account verification
  • Financial Transactions: Details required when making a deposit or submitting a withdrawal request
  • Platform Usage: Data automatically generated when you play or browse the platform
  • Support Chat: Information you share when interacting with our customer support team
  • Surveys & Feedback: Responses you provided in customer satisfaction surveys
  • Mobile App: Device and general location data if you use the shell66 app (with your permission)

All data collected through in-platform forms is transmitted over encrypted HTTPS connections. We never request sensitive information via email, WhatsApp, or any other unsecured channel.

4 Purpose of Personal Data Use

Shell66 uses your personal data exclusively for the following purposes directly related to platform operations and services provided to you:

  • Create and manage your member account and verify your identity in accordance with legal requirements
  • Process deposits, withdrawals, and all financial transactions in your account
  • Verify eligibility and process bonus and promotion claims you participate in
  • Provide effective customer support when you reach out to our team
  • Detect and prevent fraud, money laundering, and other suspicious activities
  • Comply with legal obligations and requirements from relevant regulatory authorities
  • Send important notifications related to your account, promotions, and platform updates
  • Enhance the user experience through anonymised usage data analysis
  • Conduct risk assessments and ensure compliance with responsible gaming programmes

Marketing: We will only send you marketing communications if you have given explicit consent during registration or subsequently through your account settings. You may withdraw this consent at any time.

5 Data Sharing & Disclosure

Shell66 does not sell or disclose your personal data to third parties except in the following limited situations required for platform operations or mandated by law:

  • Payment Provider: Financial data required to process deposit and withdrawal transactions via FPX, DuitNow, Touch 'n Go eWallet, GrabPay and Boost
  • Game Provider: Minimum account information required by third-party gaming software providers to deliver game content
  • KYC Services: Identity documents shared with an accredited identity verification platform to complete your KYC process
  • Authorities: Data required by law enforcement agencies, tax authorities, or regulatory bodies when mandated by court order or legislation
  • Cloud Services: Data storage infrastructure providers bound by strict confidentiality agreements with shell66

All third parties receiving personal data of shell66 members are contractually bound to protect that information and use it only for agreed purposes. We conduct regular reviews of our partners' data security practices.

In the event of a company merger, acquisition, or asset sale, member personal data may be transferred to the new entity. In such cases, you will be notified in advance and an equivalent or stricter privacy policy will apply.

6 Data Security

Protecting your personal data is the top technical and operational priority at shell66. We implement multiple layers of security to ensure your information is always protected against unauthorised access, theft, or loss.

  • 256-bit SSL data encryption for all communications between your browser and shell66 servers
  • AES-256 encryption at rest for all sensitive information stored in our database
  • Role-based access control (RBAC) system ensuring only authorised personnel can access specific data
  • 24/7 system monitoring with automated intrusion detection and real-time alerts
  • Periodic security audits conducted by independent third-party cybersecurity firms
  • Penetration testing conducted at least twice a year
  • A clear incident response protocol in the event of any data breach

Fund Segregation: Member funds are held in accounts separate from company operating funds, with layered access controls. This not only protects your money but also keeps your financial records from unnecessary exposure.

While we apply industry-best security measures, no system can be guaranteed 100% secure. We therefore encourage you to take your own precautions, such as using a strong password and enabling two-factor authentication (2FA) on your shell66 account.

7 Data Retention & Deletion

Shell66 retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes stated in this policy. Specific retention periods are as follows:

  • Active Account Data: Retained for the duration your account is active plus 7 years after account closure, in line with Malaysian legal requirements
  • Transaction Records: Retained for a minimum of 7 years for tax compliance and anti-money laundering purposes
  • Communication Logs: Support chat records and emails are retained for 3 years after the last interaction
  • Platform Usage Data: Technical logs and analytics data are retained for 2 years then anonymised
  • KYC Documents: Retained for 5 years after account closure for regulatory compliance purposes

When your data is no longer required for any legitimate purpose, shell66 will delete or anonymise it using secure deletion procedures that ensure the information cannot be recovered.

8 Cookies & Tracking Technologies

Shell66 uses cookies and similar tracking technologies to enhance your experience, ensure platform features function correctly, and help us understand how users interact with our platform.

  • Essential Cookies: Required for core platform functions such as login session management and security – cannot be disabled
  • Performance Cookies: Collect usage statistics to help us improve platform performance
  • Functional Cookies: Save your preferences such as language, display settings, and gaming preferences
  • Analytics Cookies: Used to analyse usage patterns for continuous platform improvement

Cookie Controls: You can manage or disable non-essential cookies through your browser settings. However, disabling essential cookies may affect platform functionality and your gaming experience on shell66.

We do not use third-party cookies for targeted advertising. All data collected through our cookies is used internally only and is not shared with external advertising networks.

9 Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold about you. shell66 is committed to respecting and facilitating the exercise of these rights:

  • Right of Access: You may request a copy of all personal data we hold about you at any time
  • Right to Rectification: You may request corrections to inaccurate or incomplete data via your account settings or our support team
  • Right to Erasure: You may request the deletion of your personal data, subject to legal data retention obligations
  • Right to Restriction: You may request that we restrict the processing of your data under certain circumstances
  • Right to Object: You may object to the processing of your data for direct marketing purposes at any time
  • Right to Portability: You may request your data in a structured, machine-readable format for transfer to another platform

To exercise any of the rights above, contact our data protection team via live chat or email. We will respond to your request within 30 business days. Identity verification may be required before we can process your request.

10 Child Protection

The shell66 platform is exclusively for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21.

Minor Access: If we find that we have inadvertently collected data from minors, we will immediately delete that data and close the relevant account. Parents or guardians who believe their child has registered an account at shell66 are urged to contact us right away.

We use a multi-layered age verification system including rigorous KYC checks to ensure all shell66 members meet the minimum age requirement. This is part of our commitment to responsible gaming and the protection of vulnerable individuals.

11 Privacy Policy Amendment

Shell66 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational improvements. Each new version will include a clearly indicated update date at the top of this document.

For material and significant changes, we will provide more prominent notice via in-platform notifications or email to your registered address. Minor changes that do not affect your fundamental rights may take effect without specific notice.

It is your responsibility to review this page periodically. Continued use of the shell66 platform after any amendments take effect will be considered your acceptance of the updated privacy terms.

12 Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, the shell66 data protection team is here to assist you at any time.

  • Live Chat: The fastest method – available directly within the shell66 platform, 24/7
  • Privacy Email: [email protected] – for inquiries specifically related to data protection
  • General Support Email: [email protected] – for general inquiries about your account and services
  • Supported Languages: Malay, Mandarin and English

Please include your shell66 account number in every enquiry to speed up the support process. We are committed to responding within 2–4 hours for live chat and within 24 hours for email enquiries on business days.

How shell66 Protecting Privacy You Every Day

Behind this policy are technical and operational systems working around the clock to keep your personal data secure at all times.

256-bit SSL Encryption

All data transmitted between your device and shell66 servers is encrypted using 256-bit SSL technology — the same standard used by leading financial institutions worldwide to protect sensitive information.

Two-Factor Authentication

Shell66 provides two-factor authentication (2FA) for all member accounts. This additional security layer ensures that even if your password is compromised, no one can access your account without the verification code from your device.

Payment Data Privacy

Your full bank card details or account numbers are not stored in shell66's systems. We only retain the minimum information required to verify transactions, with account numbers displayed in masked format for added protection.

Secure Server Infrastructure

Shell66 member data is stored in certified data centres with multi-layered physical and digital protection. Our servers are secured by intrusion detection systems, multi-tier firewalls, and round-the-clock security monitoring by a dedicated expert team.

Internal Access Controls

Access to member personal data within shell66 is restricted on a need-to-know basis. All access to sensitive data is logged and monitored, and staff undergo regular data protection training.

Regular Independent Audits

Shell66's data protection practices and system security are assessed by independent third-party audit firms on a regular basis. Audit findings are used for continuous improvement, ensuring we consistently meet or exceed industry standards.

Privacy Rights That You Own As a Shell66 Member

Shell66 fully respects your data protection rights under Malaysia's Personal Data Protection Act.

Right to Access

Request a complete copy of all personal data we hold about you within 30 business days.

Right to Rectify

Update or correct inaccurate or outdated personal data through your account settings or our support team.

Right to be Erased

Request deletion of your data when it is no longer needed, subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing or profiling at any time, unconditionally.

Data Portability Rights

Receive your data in a structured, machine-readable format for reuse or transfer.

Right to Restrict

Request restriction of data processing under certain circumstances while a dispute or review is in progress.

Frequently Asked Questions About Privacy Shell66

Shell66 only discloses data to authorities when required by a valid court order, direction from the Attorney General, or other applicable legal requirements in Malaysia. We do not proactively share data with any government agency unless mandated by law. Every request from authorities is carefully reviewed by our legal team before any data is disclosed.

Yes, you may request deletion of your personal data through shell66 customer support. However, certain data is required by Malaysian law to be retained — such as financial transaction records for 7 years and KYC documents for 5 years after account closure. Beyond those legal obligations, we will delete all your data within 30 business days of your request being received and verified.

Shell66 does not store your full bank card or account number in our systems. All financial transactions are processed through certified payment gateways that comply with PCI DSS standards. We only retain minimal information such as the bank name and last digits of the account in masked format for withdrawal verification purposes. Sensitive financial data is processed directly by our certified payment providers.

After account closure, shell66 will retain your data for the periods required by law — transaction records for 7 years and KYC documents for 5 years. Once these periods expire, all your data will be permanently deleted using secure erasure procedures. During this mandatory retention period, access to your data is strictly limited and solely for legal compliance purposes.

No. Shell66 does not use your personal data for targeted advertising on the platform or external websites. We do not share user profiles with third-party advertising networks. Any marketing communications from shell66 are only sent to you through our official channels based on the consent you provided during registration or through your account settings.

In the event of any data security breach involving your personal information, shell66 is committed to notifying you within 72 hours of becoming aware of the incident — in line with international best practices. Notifications will be sent via your registered email and in-platform notifications, along with details of the data involved and the steps being taken to address the situation.
Trusted Platform

Join Shell66 – The Online Casino Platform That Respecting Your Privacy

With internationally recognised data protection standards, 256-bit SSL encryption, and full commitment to Malaysia's PDPA, shell66 is a safe and trustworthy online casino platform for you.

Your data is protected · 256-bit SSL · Malaysia PDPA · Privacy Guaranteed

Bahasa Melayu