At Shell999, your privacy is not merely a legal obligation — it is a core value we uphold. This document clearly explains how we collect, store, use, and protect your personal information.
Last updated: 1 June 2026 | English | Compliant with PDPA 2010
Six core principles that underpin how Shell999 handles your personal data.
All your personal data and financial transactions are protected with 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.
Shell999 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data collection and processing practices are designed with user rights as the top priority.
Shell999 has never and will never sell, rent, or share your personal data with third-party advertisers. Your data belongs to you — we use it only to improve our services to you.
Your data is stored on servers protected by multi-layered firewalls, strict access controls, and real-time threat monitoring systems at internationally certified data centres.
You have the right to access, correct, transfer, or request deletion of your personal data at any time. Shell999 provides straightforward mechanisms for you to exercise these rights.
You have full control over Shell999 marketing communications. Unsubscribe from promotional emails or push notifications at any time via your account settings, with no impact on your services.
Shell999 collects your personal information only when it is necessary to provide quality services, meet legal requirements, and ensure platform security. We do not collect excessive or irrelevant information beyond those purposes.
When you register a shell999 account, we collect the basic information needed to verify your identity and provide access to the platform:
To fulfil KYC (Know Your Customer) requirements and prevent fraud, shell999 may request additional documents:
Automatically, the shell999 system records technical information while you use the platform, including your IP address, device type and web browser, login and logout records, betting history and financial transactions, as well as the time and duration of platform usage.
Shell999 uses collected personal information solely for the stated and lawful purposes. We do not use your data for any other purpose without notifying you in advance.
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Identity verification & KYC | Name, IC/passport, date of birth, address | Legal Obligations |
| Deposit & withdrawal processing | Bank / e-wallet details, transaction records | Contract performance |
| Service Communications | Phone number, email | Legitimate interest |
| Fraud prevention & security | IP address, device logs, login patterns | Legitimate interest |
| Platform improvements | Anonymised usage data | Legitimate interest |
| Promotions & personalised offers | Betting history, game preferences | User consent |
Shell999 does not make automated decisions that materially affect you based solely on automated data processing without any human involvement in that process.
Shell999 does not sell or rent your personal data to any third party. We only share your information in the following limited circumstances:
To operate the platform, shell999 works with selected third-party service providers, including payment processors and financial gateways, identity verification providers for KYC, cloud computing and cybersecurity services, and sports data providers for real-time odds. All these providers are required to sign data protection agreements and comply with shell999's security standards.
Shell999 may disclose user information to authorities or regulatory bodies when required by law, court order, or official investigation. In such cases, we will inform the relevant user if permitted by law.
The security of your personal data is shell999's absolute top priority. We continuously invest in the latest security technologies and procedures to ensure your information is always protected.
All communications between your device and shell999's servers are secured with 256-bit SSL encryption. Data stored in our databases uses AES-256 encryption for an additional layer of protection. The shell999 system is also equipped with multi-tier firewalls, a real-time intrusion detection system, and regular security audits.
Internal access to user personal data at Shell999 is restricted to staff who genuinely require it to perform their duties. All access is logged and monitored, and all staff are bound by strict confidentiality agreements.
Shell999 has a documented security incident response procedure. Should any data breach occur that may affect your personal information, we will notify you within 72 hours of confirming the incident, in line with international best practices.
Shell999 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.
You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the Shell999 platform and your overall user experience.
Under the Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices, you have the following rights regarding your personal data held by Shell999:
You have the right to request a copy of all personal data we hold about you. Requests are processed within 14 business days.
If any of your personal data is inaccurate or out of date, you have the right to request immediate correction through our customer support.
You may request deletion of your personal data when it is no longer needed, subject to applicable legal obligations.
You may object to the processing of your data for direct marketing purposes at any time via your account settings.
You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.
Under certain circumstances, you may request Shell999 to restrict the processing of your data while a dispute regarding its accuracy or use is being resolved.
Shell999 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law.
Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered or accessed again.
Shell999 strictly prohibits the use of the platform by individuals under the age of 18. Our platform is not designed for children or adolescents, and we do not knowingly collect personal data from underage individuals.
We apply age verification procedures during registration, including date of birth checks and KYC document verification, to prevent use of the platform by minors. Should we discover that personal data of a minor has been inadvertently collected, we will promptly delete that data and terminate the relevant account.
Parents or guardians concerned about potential use of the Shell999 platform by a minor are encouraged to contact our customer support immediately.
Shell999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.
When we make material changes, we will notify you via your registered email or a prominent notice on the platform at least 14 days before the amendment takes effect. For less material amendments, we will update the "last updated" date at the top of this document.
Your continued use of the shell999 platform after the effective date of any amendment indicates your acceptance of the updated Privacy Policy. If you do not agree with the relevant amendments, you may close your account before they take effect.
If you have any questions, concerns, or wish to exercise your privacy rights, please contact the Shell999 privacy team through the following channels:
You may also contact the Department of Personal Data Protection (JPDP) Malaysia if you believe Shell999 has violated your privacy rights under PDPA 2010. Further information about JPDP is available through the official website of the Ministry of Communications Malaysia.
With multi-layered encryption and a transparent privacy policy, you can enjoy the best wagering experience with complete confidence.
Secure Account Registration Read Terms & Conditions