Official Shell888 Documents

Privacy Policy Shell888 – Personal Data Protection for Malaysia Members

Your privacy is Shell888's priority. This document clearly explains what data we collect, how we use it, who can access it, and your rights as a registered member. Shell888 is committed to protecting your personal information to the highest security standards available.

Last Updated: 1 January 2026  ·  Version 3.1

Privacy Commitment Shell888 to You

Six core principles that ensure your personal data is always kept safe and handled with complete integrity.

256-bit SSL Encryption at All Times

All data transmitted between your device and Shell888's servers is protected by 256-bit SSL encryption — the same standard used by leading banks in Malaysia. No one can intercept or read your information while it is in transit.

Top-Tier Security
No Sale of Data to Third Parties

Shell888 never sells, rents, or trades members' personal data to any third party for marketing purposes. Your information is used solely for Shell888's own platform operations — nothing more.

Your Data Belongs to You
Strictly Limited Data Access

Only authorised Shell888 staff with a legitimate business need may access members' personal data. All access is automatically logged and monitored around the clock by our internal security team to detect any improper use.

Strict Controls
User Rights Fully Respected

You have the right to request a copy of your personal data, correct inaccurate information, request deletion of your data, and withdraw consent at any time. Shell888 will process all such requests within 14 business days.

Your Rights Are Protected
Minimum Necessary Data Retention

Shell888 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required under Malaysian law. Data that is no longer needed is securely deleted using non-recoverable methods.

Responsible Retention
Immediate Data Breach Notification

In the highly unlikely event of a data breach affecting member information, Shell888 is committed to notifying affected members within 72 hours of detecting the breach, along with the mitigation steps being taken.

Full Transparency

Quick Summary: Shell888 collects your personal data to operate the platform safely and fairly. We do not sell your data. We protect it with the strongest encryption available. You can request, correct, or delete your data at any time. If you have any questions, our team is available in Bahasa Malaysia and ready to assist 24/7.

1 Scope of This Privacy Policy

This Privacy Policy is published by Shell888 ("we", "Shell888", or "Platform") and applies to all individuals who interact with the Shell888 platform, including:

  • Registered members using any Shell888 service — Live Casino, slots, blackjack, poker, Sports Betting covering football (Malaysia Super League, EPL), badminton, cricket, e-sports, and more.
  • Individuals who visit shell888.biz or use the Shell888 mobile app, even without registering an account.
  • Individuals who contact the Shell888 customer support team through any communication channel.

This Policy describes Shell888's practices regarding the collection, use, storage, sharing, and protection of personal data. By registering an account or using the Shell888 platform, you confirm that you have read and agreed to the terms of this Privacy Policy.

This Privacy Policy should be read alongside Shell888's Terms & Conditions, which together form the complete agreement between you and Shell888.


2 Types of Personal Data We Collect

Shell888 collects your personal data through several means — information you provide directly during registration, data collected automatically while you use the platform, and information obtained from legitimate third-party sources. The table below outlines the categories of data collected:

Data Category Sample Information How It Is Collected
Identity Data Full name, KYC number, date of birth, gender Account registration, KYC process
Contact Data Phone number, email address, Telegram ID Account registration, customer support
Financial Data E-wallet account numbers (TNG, GrabPay, DuitNow), deposit/withdrawal records In-platform transactions
Gameplay Data Betting history, matches followed, wins/losses, time played Automatically applied during platform use
Technical Data IP address, device type, operating system, web browser, general location data Automatically via cookies and similar technologies
Communication Data Customer support chat logs, email content, complaint records Interactions with the Shell888 support team

Shell888 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information, political views, or religious affiliation. Full credit card numbers are not stored on Shell888's servers — transactions are processed directly through licensed payment processors that comply with PCI-DSS standards.


3 How Shell888 Uses Your Data

Shell888 uses your personal data for the following purposes, all of which are necessary to operate the platform safely, fairly, and effectively:

  • Account Operations: Verifying your identity at login, processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks, and maintaining accurate transaction records.
  • KYC (Know Your Customer) Verification: Ensuring all members meet the minimum age requirement of 18 and comply with the anti-money laundering (AML) compliance requirements set by Shell888's licensed regulatory body.
  • Platform & Game Operations: Provides access to all Shell888 services including live casino, Sports Betting (Malaysia Super League football, EPL, BWF badminton, IPL cricket, e-sports), slots, poker, and blackjack.
  • Security & Fraud Prevention: Detecting and preventing unauthorised access, duplicate account fraud, bonus abuse, and any activity that threatens the integrity of the platform.
  • Service Communications: Sending important account notifications, policy updates, promotions you have opted in to receive, and responses to customer support enquiries.
  • Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to understand the most useful features and identify areas of the platform that need improvement.
  • Legal Compliance: To fulfil applicable legal and regulatory obligations, including maintaining financial transaction records as required under Malaysian law.

Shell888 does not use your personal data for any purpose not stated above without first obtaining your explicit consent.


4 Data Sharing with Third Parties

Shell888 does not sell, rent, or trade members' personal data to any third party for marketing or other commercial purposes. However, there are limited situations in which Shell888 may share data with certain parties:

  • Technical Service Providers: Companies that provide technical services to Shell888, such as payment processing, server infrastructure, or security software. All such providers are bound by strict confidentiality agreements and are only permitted to use data for the specific purposes stated in those agreements.
  • Regulatory Authorities & Law Enforcement: Shell888 may be required by law to share certain data with licensed regulatory bodies, law enforcement agencies, or courts when lawfully directed to do so. Shell888 will comply with such orders and, to the extent permitted by law, will notify the affected members.
  • Corporate Transactions: In the event of a merger, acquisition, or sale of Shell888's assets, members' personal data may be transferred to the successor entity. Shell888 will ensure that equivalent or greater privacy protections are maintained and will notify members before any data transfer takes place.

Shell888's Commitment: In all situations where data must be shared, Shell888 will only share the minimum data necessary for the specific purpose in question — nothing beyond what is strictly required. This data minimisation principle is central to how Shell888 manages member privacy.


5 Data Security Measures

Shell888 continuously invests in security infrastructure to protect member data. The layers of protection we employ include:

  • Data-in-Transit Encryption: 256-bit SSL/TLS encryption for all communications between user devices and Shell888 servers.
  • Stored Data Encryption: Sensitive data stored in the database is encrypted using strong cryptographic algorithms.
  • Two-Factor Authentication (2FA): Available to all accounts — Shell888 encourages every member to activate 2FA for an added layer of security.
  • 24/7 Security Monitoring: Our internal security team continuously monitors all system activity to detect any intrusion attempts or unusual behaviour.
  • Regular Security Testing: Penetration testing is conducted regularly by independent security experts to identify and patch vulnerabilities before they can be exploited.
  • Internal Access Controls: The principle of least privilege is applied — each staff member only has access to the data specifically required for their role.

While Shell888 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection under all circumstances. You also play an important role in your own account security — use a strong password, never share your login credentials, and enable 2FA.


6 Cookies and Tracking Technologies

Shell888 uses cookies and similar tracking technologies to enhance user experience and gather analytical information. The following are the types of cookies we use:

  • Essential Cookies: Required for the platform to function correctly — maintaining your login session, remembering language preferences, and securing transactions. These cookies cannot be disabled without affecting core platform functionality.
  • Performance Cookies: Collecting information on how you use the Shell888 platform — the most frequently visited pages, time spent, and any errors encountered. This data is used in aggregate form to improve the platform.
  • Functional Cookies: Remembering your preferences such as display settings, favourite game selections, and account configurations to provide a more personalised experience.
  • Analytics Cookies: Helps Shell888 understand how users interact with the platform as a whole. This information cannot be used to identify any specific individual.

You can manage and delete cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the Shell888 platform. For guidance on how to manage cookies, refer to your browser's help documentation.


7 Data Retention & Deletion

Shell888 retains your personal data only for as long as necessary to fulfil the original purpose for which it was collected, or as required under Malaysian law. The following are retention period guidelines for key data categories:

  • Active Account Data: Retained for as long as the account remains active and in use. An account is considered inactive after 12 months without a login.
  • Financial Transaction Records: Retained for a minimum of seven (7) years from the transaction date, in compliance with Malaysian financial regulatory requirements.
  • Customer Support Communication Logs: Retained for two (2) years from the date of the last interaction for reference and dispute resolution purposes.
  • Technical Data (Server Logs): Retained for 90 days for security and technical troubleshooting purposes.
  • Following Account Closure: Personal data that is no longer required will be deleted or anonymised within 30 days of account closure, except for data that must be retained for legal compliance.

When data is no longer needed, Shell888 uses secure deletion methods that ensure it cannot be recovered by any party. For data stored in physical format, secure destruction procedures are followed.


8 Your Personal Data Rights

As a Shell888 member, you have the following rights regarding your personal data. Shell888 is committed to respecting and facilitating the exercise of these rights:

  • Right of Access: You have the right to request a copy of the personal data Shell888 holds about you, including details of how it is used and with whom it is shared.
  • Right to Rectification: You have the right to request that Shell888 correct any inaccurate or incomplete personal data held in our records.
  • Right to Erasure: You have the right to request the deletion of your personal data under certain circumstances — for example, if the data is no longer needed for its original purpose, or if you withdraw your consent. This right is subject to Shell888's legal obligations to retain certain records.
  • Right to Restriction of Processing: You have the right to request that Shell888 restrict the processing of your data under certain circumstances, such as while a dispute regarding data accuracy is being investigated.
  • Right to Data Portability: You have the right to receive the personal data you have provided to Shell888 in a structured, commonly used, machine-readable format, for transfer to another service.
  • Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.

To exercise any of the rights above, please contact Shell888's privacy team by email at support@shell888.biz with the subject line "Privacy Rights Request", or via live chat within the platform. Shell888 will process your request within 14 working days. We may request identity verification before processing any request to ensure the security of your data.


9 Protection of Children's Data

Shell888 takes the privacy protection of children and minors extremely seriously. The Shell888 platform is strictly for users aged 18 and above only, without any exceptions.

  • Shell888 does not knowingly collect any personal data from individuals under the age of 18.
  • Should Shell888 discover that personal data from a minor has been collected without our knowledge, we will promptly take steps to delete that data and close the account in question.
  • Parents or guardians who suspect that their underage child has a Shell888 account or has provided personal data to Shell888 should contact us immediately at support@shell888.biz for prompt action.

Shell888 employs an age verification process during registration and reserves the right to request proof of age (such as a copy of the MyKad) at any time should there be any doubt about a member's age.


10 Amendments to This Privacy Policy

Shell888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or how we handle data. When material amendments are made:

  • Shell888 will update the "Last Updated" date at the top of this document.
  • Members will be notified via in-platform notifications and/or email to their registered address within a reasonable period before any amendments take effect.
  • Continued use of the Shell888 platform after an amendment takes effect constitutes acceptance of the revised policy.
  • If you do not agree with the amendments, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 8.

The current version of this Privacy Policy is always available on this page. We encourage you to check this page periodically to stay up to date with our latest privacy practices.


11 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how Shell888 handles your personal data, please contact us:

Privacy Email
support@shell888.biz  ·  Subject: "Privacy Request"
Response within 2 hours during office hours; 24 hours at all other times
Live Chat
Available on the Shell888 platform & app — 24 hours a day, 7 days a week
Average response time: under 3 minutes
Support Language
Bahasa Melayu & English — local Malaysia-based team
Responsible Gaming

Privacy is not just about data — it is also about your wellbeing. Shell888 provides deposit and betting limit features to help you play within safe boundaries. This platform is intended for users aged 18 and above only.

Learn More About Responsible Gaming

Layer Security Shell888

Data security is not a single layer — it is a multi-tiered defence system working together to protect your information.

Network Layer Active
256-bit SSL/TLS encryption for all web traffic. DDoS protection and application-level firewall.
Authentication Layer 2FA Available
Two-factor authentication, unusual login detection, and automatic account lockout after repeated failed attempts.
Database Layer Encrypted
Sensitive data is encrypted at rest. Regular backups with full encryption are maintained for disaster recovery purposes.
Monitoring Layer 24/7
SIEM (Security Information and Event Management) monitors all system activity in real time with automated alerts for anomalies.
Audit Layer Periodic
Independent penetration testing is conducted every quarter. All findings are remediated before the report is published.

Your Rights Your Privacy — Summary

Shell888 respects and supports the exercise of all your privacy rights. Below is a quick-reference summary.

01
Right of Access

Request a copy of all personal data Shell888 holds about you, including details of how it is being used.

02
Right to Rectification

Request that Shell888 correct any inaccurate or incomplete personal data held in our records.

03
Right to Erasure

Request that Shell888 delete your personal data when it is no longer needed, subject to applicable legal obligations.

04
Right to Portability

Receive your data in a structured, machine-readable format for transfer to another service.

05
Right to Restriction

Request that Shell888 restrict the processing of your data in certain situations, such as while a dispute is being investigated.

06
Right to Withdraw Consent

Withdraw consent for data processing at any time without affecting any processing that was carried out prior to withdrawal.

To exercise any of the rights above, contact Shell888 at support@shell888.biz with the subject line "Privacy Rights Request". We will respond within 14 business days.

Understanding Shell888 Privacy Policy — A Guide for Malaysia Members

In today's digital age, data privacy is a fundamental right — not an optional feature. Shell888 takes a clear stance on this: your personal data belongs to you, and Shell888 is simply a temporary custodian holding it for the purposes of running the platform. Everything we do with your data is to enable you to use the platform safely and enjoyably — not for side gains through data sales or privacy-invasive advertising.

One of the most common questions from new Shell888 members is — "Is my bank card or e-wallet information safe?" The short answer is yes, because Shell888 does not store your full financial account numbers on our servers. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks, the transaction is processed through licensed third-party payment infrastructure that complies with international PCI-DSS security standards. Shell888 only receives confirmation that the payment was successful — not your financial account details.

Another common question concerns gameplay data — your betting history, the matches you followed in Sports Betting for the Malaysia Super League or EPL, the slots you played, the poker tables you joined. Shell888 does retain this data, and its purpose is to support proper account operation, resolve disputes where they arise, and meet licensing compliance requirements. This data is not sold to advertisers or used to build user profiles for external purposes. It is an internal Shell888 record, strictly protected.

On the topic of cookies and tracking — Shell888 uses them, and we want to be upfront about it. Cookies help us remember that you are logged in, save your display preferences, and understand which parts of the platform are used most. They are not used to monitor your activity outside of Shell888 or to build a detailed personal profile. You can manage these cookies through your browser settings — though disabling essential cookies will affect login functionality and session security.

Shell888 also wants to be transparent about a situation that often concerns users — when we are required to share data with the authorities. Malaysia has laws governing financial activity and anti-money laundering that obligate companies like Shell888 to retain certain transaction records and report suspicious activity. This is not Shell888's choice — it is a legal obligation. What is important to understand is that Shell888 does not share this data voluntarily or proactively — we only do so when lawfully required by the relevant authorities.

For members who wish to know what data Shell888 holds about them, the process is straightforward — send an email to support@shell888.biz with the subject line "Data Access Request" from your registered email address. Shell888's team will process your request and provide a summary of the relevant data within 14 business days. We may request additional identity verification to ensure we are providing data to the right person — this is to protect you, not to slow down the process.

Members considering closing their Shell888 account should be aware that doing so does not mean all their data is immediately deleted. Malaysian financial law requires Shell888 to retain financial transaction records for seven years from the date of each transaction. This is a legal requirement that cannot be waived even after an account is closed. Other data not subject to this legal obligation will be deleted or anonymised within 30 days of account closure.

Finally, Shell888 wishes to reaffirm our unwavering commitment: we do not sell user data, we do not use it for purposes beyond platform operations, and we continually strive to limit data collection to only what is strictly necessary. The trust of more than 250,000 active Shell888 members is our most valuable asset — and protecting privacy is one of the most fundamental ways Shell888 upholds that trust.

If any part of this Privacy Policy is unclear, or if you have more specific questions about how Shell888 handles your personal data, don't hesitate to reach out to our team. We offer support in Bahasa Melayu, are available 24/7, and treat every privacy question as important — because it is.

Join Shell888 with Confidence

Your Data Is Safe. Your Entertainment, Guaranteed.

Shell888 protects your privacy to the highest security standards. Register today and enjoy Live Casino, Sports Betting on Malaysia Super League football, badminton, e-sports, and over 30 other sports — safely, securely, and in Bahasa Melayu.

Minimum deposit RM10  ·  3-minute withdrawals  ·  Touch 'n Go & DuitNow accepted  ·  18 and above only

Bahasa Melayu