Shel99 Privacy Policy – Our Commitment to Malaysia Player Data

Shel99 is an online casino and Sports Betting platform serving Malaysian players. We understand that your trust is the foundation of our relationship — and that trust starts with responsible, transparent data management.

This Privacy Policy is written specifically for Malaysian players and is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We take your privacy seriously — not merely because the law requires it, but because we believe every player has the right to know exactly what happens with their information.

In the context of this Policy, "personal information" refers to any information that can be used to identify you directly or indirectly — including your name, phone number, email address, financial information, and records of your activity on the shel99 platform.

This Policy applies to all players who access or use the shel99 platform through any device or channel, including the website, mobile applications, and any other services offered by shel99.

Shel99 collects various types of information in order to provide you with a safe, fair, and high-quality service. Below are the categories of data we collect and the sources from which they are obtained.

a) Information you provide directly:

• Full name as it appears on your official Malaysian identification document
• Date of birth and MyKad or passport number for age verification and KYC purposes
• Malaysian email address and phone number
• Malaysian residential address
• Malaysian bank account or eWallet details (for the purpose of processing verified winnings withdrawals)
• Additional information you provide when contacting customer support or completing forms on the shel99 platform

b) Automatically collected information:

• Your device's IP address and general location information (state/region)
• The type of device, operating system, and web browser you use
• Login session records including date, time, and session duration
• Gaming activity records including game type, bet amounts, and outcomes
• Deposit and withdrawal transaction records
• Cookies and similar tracking technologies — explained further in Section 7

c) Information from third-party sources:

• Identity verification information from certified KYC (Know Your Customer) service providers
• Payment confirmation information from payment gateways such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks)
• Fraud prevention information from third-party security services used by shel99

Shel99 uses the data we collect for specific and legitimate purposes only. We do not use your data for anything unrelated to the services we provide.

Shel99 also uses your information to comply with Malaysian legal requirements, including anti-money laundering (AML) obligations and mandatory reporting to relevant authorities as required by law.

Shel99 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, there are limited situations where we need to share your information with certain parties in order to provide our services to you.

Parties that may receive your data:

• Payment service providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) receive the information necessary to process your transactions. They are bound by strict payment security standards and maintain their own privacy policies.
• KYC service provider: To meet identity verification requirements, shel99 uses certified third-party services. Information shared is limited strictly to what is necessary for verification.
• Game providers: Casino providers such as Evolution, Pragmatic Play, and others may receive a game session ID that does not contain your full personal identification details.
• Legal authorities: shel99 will disclose information when required by a valid Malaysian court order or applicable legal obligations such as AML (Anti-Money Laundering) regulations.
• IT and security services: IT service providers that support shel99's operations, subject to strict confidentiality agreements.

In all of the above situations, shel99 ensures that the receiving party is bound by data protection obligations that are equivalent to or stricter than our own. We do not share your data across international borders unless required for the technical operation of the platform and subject to adequate safeguards.

Protecting your data from unauthorised access, use, or disclosure is one of shel99's highest technical priorities. We continuously invest in the latest security infrastructure.

shel99 technical security measures:

• 256-bit SSL/TLS encryption: All communication between your device and shel99 servers is encrypted using the latest SSL/TLS protocols. This means that even if someone were to intercept data in transit, it would be unreadable without the decryption key.
• Data-at-rest encryption: Personal data stored in shel99's databases is encrypted using AES-256 standards.
• Two-factor authentication (2FA): Available to all shel99 player accounts. We encourage all players to enable this feature.
• 24/7 security monitoring: shel99's cybersecurity team continuously monitors our systems to detect and respond to any threats or suspicious activity.
• Regular security audits: shel99's infrastructure undergoes regular independent security audits conducted by qualified third-party security firms.
• Internal access controls: Access to player data within shel99 is restricted to staff who require it for their specific duties only, based on the principle of least privilege.

While we take all reasonable steps to protect your data, no security system is 100% impenetrable. We encourage you to do your part by using a strong, unique password for your shel99 account and changing it regularly.

Malaysian players use a variety of local payment methods for deposits and withdrawals at shel99 — including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks). shel99 takes an exceptionally careful approach to handling your financial information.

shel99 payment privacy principles:

• Shel99 does not store your full bank account number, debit/credit card number, or eWallet PIN in our systems.
• All financial transactions are processed through certified payment gateways that comply with PCI-DSS (Payment Card Industry Data Security Standard).
• Shel99 retains only the information necessary for account reconciliation and legal compliance purposes — such as transaction IDs, amounts, dates, and the payment method used.
• For withdrawal identity verification purposes, shel99 may retain the account holder's name and the name of the relevant financial institution — but not the full account number.
• Transaction records are retained for the period required under applicable Malaysian law (typically 7 years) before being securely deleted.

Shel99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit the shel99 website.

Types of cookies used by shel99:

• Strictly necessary cookies: Required for core platform functions such as login session management, account security, and transaction processing. These cookies cannot be disabled as the platform will not function properly without them.
• Preference cookies: Stores your preferences such as interface language, display settings, and favourite games so you don't have to reconfigure them each time you log in to shel99.
• Analytics cookies: Helps us understand how players use the shel99 platform in aggregate and anonymised form — this information is used to improve the user experience. This data cannot be used to identify you personally.
• Security cookies: Used to detect and prevent fraudulent activity, suspicious login attempts, and other security threats.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the shel99 platform. Third-party cookies (where applicable) are subject to the respective provider's privacy policy.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices, you have several rights regarding the personal data shel99 holds about you.

To exercise any of the above rights, contact the shel99 data protection team by email at support@shel99.best with the subject line "Privacy Rights Request". Include your full name, account ID, and a description of your request. We will respond within 14 business days.

Shel99 is a platform intended exclusively for adults aged 18 and above. We take child protection very seriously and do not knowingly collect, store, or process any information from individuals under the age of 18.

• All registering players are required to confirm that they are at least 18 years of age.
• Our KYC process includes age verification using official Malaysian identification documents.
• If shel99 discovers that information from a person under the age of 18 has been inadvertently collected, we will delete that information immediately and close the relevant account.
• If you know or suspect that someone under the age of 18 is using or attempting to use the shel99 platform, please contact us immediately at support@shel99.best.

Shel99 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required under applicable Malaysian law.

• Active account data: Retained for the duration your shel99 account remains active, plus any additional period required by law.
• Financial transaction records: Retained for a minimum of 7 years after the transaction occurs, in accordance with Malaysia's tax and AML legal requirements.
• KYC verification records: Retained for 6 years after account closure, in line with anti-money laundering legal requirements.
• Customer support communication logs: Retained for 2 years after the relevant issue is resolved.
• Analytics cookie data: Typically deleted or anonymised within 12 months.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. If your account is closed at your request or by shel99, the data deletion process will follow the schedule above, unless we are legally required to retain it for a longer period.

Shel99 reserves the right to amend this Privacy Policy from time to time to reflect changes in Malaysian law, technological developments, or changes in how we operate.

• Players will be notified of any significant amendments via their registered email or an in-platform notification on shel99 at least 14 days before taking effect.
• The "Updated" date shown at the top of this document reflects the date this Policy was last modified.
• Continued use of the shel99 platform after any amendments take effect will be considered acceptance of the revised policy.
• If you do not agree with the amendments made, you have the right to close your account and request deletion of your data before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The latest version will always be available on this page of the shel99 website.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way shel99 handles your personal data, please contact us through the following channels:

• Privacy Email: support@shel99.best (include the subject line "Privacy Inquiry" or "Privacy Rights Request")
• Live Chat: Available 24/7 directly within the shel99 platform, with an average response time of under 3 minutes
• WhatsApp: Available via shel99's official WhatsApp account — contact support for the latest number

The shel99 data protection team will respond to privacy-related enquiries within 5 business days. For formal data rights requests (access, correction, deletion), the processing time is within 14 business days from the date a complete request is received.

All shel99 support communications are fully available in Bahasa Melayu. You never have to worry about language barriers — our team understands the context and needs of Malaysian players inside and out.