Shell 77 Privacy Policy – Malaysian Player Data Protection

Introduction & Scope of Shell 77's Privacy Policy

Shell 77 is an online casino platform operating in Malaysia, catering specifically to local players. We understand that your trust is the foundation of the relationship we build together. One of the ways we honour that trust is by being fully transparent about how your personal data is handled.

This Privacy Policy outlines Shell 77's data protection practices and applies to all personal data collected through shell77.biz, our mobile app (where applicable), and all our communication channels including live chat, email, and customer support. This Policy does not cover third-party websites that may be linked from our platform.

Shell 77 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously and have appointed a dedicated team to ensure ongoing compliance with all relevant data protection legal requirements.

Types of Personal Data We Collect

Shell 77 only collects personal data that is necessary to deliver our services safely, efficiently, and in compliance with applicable laws. Below is a full breakdown of the data types we retain:

How We Collect Your Personal Data

Shell 77 collects your personal data through several distinct channels, all with your knowledge and consent:

• Account Registration: When you first register a Shell 77 account, you provide basic information such as your name, email, phone number, and password.
• Identity Verification (KYC): To meet legal requirements and process withdrawals, we require a copy of a valid government-issued identity document such as a MyKad or Malaysian passport.
• Financial Transactions: Payment method information is collected automatically when you make a deposit via DuitNow, Touch 'n Go eWallet, GrabPay, FPX (Maybank2u or CIMB Clicks), ShopeePay, or Boost.
• Platform Usage: Technical data and gameplay data are collected automatically when you use our platform via cookies, page loaders, and standard tracking technologies.
• Customer Support Interactions: When you contact the Shell 77 support team via live chat or email, the contents of that conversation are stored for quality control purposes and dispute resolution.
• Referral Programme: If you participate in a referral programme, your name and basic information may be shared with the referring member – but only with your consent.

Purpose of Personal Data Use

Shell 77 uses collected personal data solely for legitimate and specific purposes. We will not use your data for any other purpose without first obtaining your consent:

• Account Management: Creating, verifying, and managing your player account, including the login process, account security, and identity verification.
• Payment Processing: Processing deposits and withdrawals securely, verifying transactions, and maintaining financial records as required by law.
• Gaming Service Provision: Grants you access to all Shell 77 games, including baccarat, roulette, table games, Live Casino, slots, e-sports, and jackpots.
• Service Communications: Sending important account notifications, transaction confirmations, security alerts, and policy updates.
• Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, or platform abuse that compromises the security of all players.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and taking appropriate preventive action.
• Platform Improvements: Analysing usage data (in aggregated, anonymised form) to improve the quality and performance of the Shell 77 platform.
• Legal Compliance: Fulfilling our legal obligations under Malaysia's PDPA and other applicable legislation.

Data Sharing & Disclosure to Third Parties

Shell 77 does not sell or disclose your personal data to external parties except in the following limited and lawful circumstances:

• Payment Service Providers: Digital wallet and payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, and ShopeePay receive only the minimum transaction information required to process your payment.
• Identity Verification Provider: Third-party companies that assist us in verifying player identities through the KYC process. All such providers are bound by strict confidentiality agreements.
• Game Providers: Gaming software providers that supply the Live Casino, slots, and table game platforms may receive the minimum gameplay data required to operate their games.
• Legal Authorities: Where required by a court order, directive from a law enforcement authority, or other legal obligation, Shell 77 may be required to disclose data to the relevant authorities.
• Business Transfer: Should Shell 77 be involved in a merger, acquisition, or asset sale, user data may be transferred to the new entity – however, users will be notified in advance.

All third parties who receive data from Shell 77 are contractually bound to use it solely for the specified purposes and to protect it in accordance with security standards equivalent to or higher than our own.

Shell 77 Data Security Measures

Protecting your personal data from unauthorised access, loss, or misuse is one of Shell 77's highest operational priorities. We continually invest in security infrastructure to ensure your data remains safe at all times:

• 256-bit SSL Encryption: All data transmitted between your web browser and Shell 77's servers is encrypted using TLS 1.3 with AES-256 encryption – the same standard adopted by world-class financial institutions.
• Secure Data Storage: Personal data is stored in data centres protected by strict physical access controls, 24-hour surveillance, and redundant backup systems.
• Internal Access Controls: Only staff with a legitimate operational need are permitted to access players' personal data. Such access is logged and audited on a regular basis.
• Encrypted Passwords: Account passwords are stored in a hashed format that cannot be read — even by Shell 77's own technical team.
• Regular Penetration Testing: Shell 77 conducts regular security audits to identify and patch vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an added layer of account protection.

Data Retention Period

Shell 77 does not retain your personal data for longer than is necessary for its stated purpose or as required by law. Below is an overview of our data retention periods:

• Active Account Data: Retained for the duration your account remains active and for 7 years after account closure, in accordance with Malaysia's financial record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's Companies Act requirements and applicable financial regulations.
• KYC Verification Data: Retained for the duration of the active account and 5 years after account closure, in accordance with anti-money laundering requirements.
• Support Communication Records: Retained for 3 years for quality control purposes and as a reference in the event of a dispute.
• Technical Data & Logs: Technical log data is retained for 90 days, and anonymised analytics data is retained for 2 years.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised using procedures that ensure it cannot be recovered or re-identified.

Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Shell 77's policies, you hold several important rights regarding your personal data. We respect and facilitate the exercise of all these rights:

To exercise any of the above rights, please submit a written request to support@shell77.biz with the subject line "Personal Data Rights Request". We will respond within 14 business days.

Cookies & Tracking Technologies

Shell 77 uses cookies and similar tracking technologies to enhance your experience on our platform. Here is a full breakdown of the types of cookies we use:

You may manage or disable optional cookies through your web browser settings or via the cookie settings panel located at the bottom of the Shell 77 page. Please note that disabling mandatory cookies may affect platform functionality.

Children's Privacy & Protection of Young Persons

Shell 77 takes its responsibility to protect children and young people from exposure to online gambling extremely seriously. The Shell 77 platform not intended for individuals under the age of 18 under any circumstances.

We do not knowingly collect personal data from children. Should we discover that a child's personal data has been collected without parental or guardian knowledge, we will immediately take the following steps:

• Closing the associated account immediately.
• Deleting all such children's personal data from our systems.
• Returning any deposited funds, subject to the appropriate verification process.
• Reporting incidents to the relevant authorities where necessary.

Parents and guardians who believe their child has registered a Shell 77 account without authorisation are urged to contact us immediately at support@shell77.biz or via live chat.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding Shell 77's Privacy Policy or the handling of your personal data, please reach out to us through the following channels:

• Email: support@shell77.biz (Subject: Data Privacy Inquiry)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the Shell 77 platform
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days and resolving data rights requests within 14 business days

If you are dissatisfied with how we have handled your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body under the Ministry of Communications and Digital Malaysia.