Shell88 takes your privacy seriously. This policy explains exactly what personal data we collect, how we use it, who we share it with, and what rights you have as a Malaysian player.
Last Updated: 1 January 2026Our Privacy Principles
Six core principles that govern every data handling decision Shell88 makes — from the moment you register to the moment you withdraw your winnings.
We collect only the personal data that is strictly necessary to operate your account, process payments, verify your identity, and fulfil our responsible gambling obligations. We do not gather data speculatively or for undisclosed purposes.
Shell88 does not sell, rent, or commercially transfer your personal data to third-party marketing companies under any circumstances. Your data is used solely to operate the Shell88 platform and meet our legal obligations.
All data transmissions between your device and Shell88's servers are protected by 256-bit SSL/TLS encryption. Player data is stored on secured servers with access controls, regular audits, and intrusion monitoring in place.
You have the right to access, correct, and request deletion of your personal data held by Shell88. These are genuine rights you can exercise at any time by contacting our support team — they will not be dismissed or made unnecessarily difficult.
We do not retain your data indefinitely. Retention periods are tied to the purpose for which the data was collected — typically 5 years post-account-closure for financial records (in line with anti-money laundering obligations), and shorter periods for marketing data.
This Privacy Policy is written in plain English and explains every category of data we process, every lawful basis we rely on, and every type of third party we engage. No hidden processing, no vague "partner" language that conceals data sharing.
This Privacy Policy ("Policy") describes how Shell88 ("Shell88", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "the Player") who access or use the Shell88 online casino and sports betting platform at https://shell88.cam (the "Platform").
Shell88 operates the Platform primarily for Malaysian players and is committed to handling personal data responsibly, in compliance with applicable data protection principles and obligations. All data processing activities described in this Policy are conducted in English to serve the Platform's English-language Malaysian user base.
By creating a Shell88 account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.
This Policy should be read in conjunction with Shell88's Terms & Conditions, which form part of the overall agreement between Shell88 and each registered Player. In the event of conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.
This Policy applies to personal data collected via the Shell88 website, any related mobile-optimised interfaces, and any communications you have with Shell88 support. It does not apply to third-party websites linked from the Platform — Shell88 is not responsible for the privacy practices of external sites.
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, email address, phone number, payment details, device identifiers, and gaming history — that Shell88 holds in relation to a Player. |
| "Processing" | Any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction. |
| "Data Controller" | Shell88, as the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of Shell88 under a contractual arrangement, such as a payment gateway provider or cloud hosting service. |
| "Lawful Basis" | A legally recognised ground that permits Shell88 to process Personal Data — including contractual necessity, legal obligation, legitimate interests, and explicit consent. |
| "KYC" | Know Your Customer — the identity and age verification process, which may involve collection of government-issued identification documents and proof of address. |
| "Cookies" | Small data files placed on a Player's device by the Platform to support functionality, analytics, and security processes. |
Shell88 collects Personal Data in the following categories, depending on how you interact with the Platform:
| Data Category | Specific Data Items |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, copy of government-issued identity document (e.g., Malaysian MyKad or passport), selfie photograph (where required for KYC liveness verification). |
| Contact Data | Email address, mobile phone number, and Malaysian city/state of residence (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam). |
| Account Data | Username, encrypted password hash, security question responses (if set), account preferences, responsible gambling settings (deposit limits, self-exclusion status). |
| Financial Data | Payment method identifiers (Touch 'n Go eWallet account reference, Boost account reference, GrabPay reference, bank account number (last 4 digits), cryptocurrency wallet address), transaction history, deposit and withdrawal amounts in MYR. |
| Gaming History | Bet records, game session logs, wagering volumes, bonus uptake records, win/loss history, and in-play activity timestamps. |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone, session duration, pages visited, and referral source. |
| Communication Data | Content of support tickets, live chat transcripts, email correspondence, and feedback submissions between you and Shell88. |
| Marketing Preferences | Your opt-in or opt-out status for promotional communications, including email newsletters and platform notifications. |
We do not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where age-related health disclosures are made voluntarily in the context of responsible gambling support requests.
Shell88 collects Personal Data through the following channels:
Shell88 processes Personal Data only where a lawful basis for doing so exists. The table below sets out the primary purposes for which we process data and the corresponding lawful basis:
| Processing Purpose | Lawful Basis |
|---|---|
| Account registration and management | Contractual necessity — performance of the Player agreement |
| Processing deposits and withdrawals in MYR | Contractual necessity |
| Age and identity verification (KYC) | Legal obligation — anti-money laundering and age verification requirements |
| Fraud detection and platform security | Legitimate interests — protecting Shell88 and its players from financial crime |
| Responsible gambling monitoring and intervention | Legal obligation and legitimate interests — player protection obligations |
| Customer support and dispute resolution | Contractual necessity and legitimate interests |
| Sending promotional communications | Consent — you may withdraw consent at any time via your account settings |
| Platform analytics and performance optimisation | Legitimate interests — improving the Platform experience for Malaysian players |
| Compliance with regulatory requests or legal proceedings | Legal obligation |
Where Shell88 relies on legitimate interests as a lawful basis, we have assessed that our interests are not overridden by your fundamental rights and freedoms. You may request details of any such assessment by contacting our support team.
Shell88 uses cookies and similar tracking technologies on the Platform. The following categories of cookies are in use:
Shell88 does not use third-party advertising cookies or behavioural profiling cookies that serve targeted advertisements from external networks. Analytics data is processed internally and is not shared with advertising platforms.
You may manage cookie preferences through your browser's settings. Note that disabling strictly necessary cookies will impair your ability to access your account and use Platform features. For functional and analytics cookies, disabling them affects user experience but does not prevent basic Platform access.
Shell88 does not use cookies to track your activity on external websites. Our tracking is limited to activity within the https://shell88.cam domain.
Shell88 does not sell your Personal Data. We disclose Personal Data to third parties only in the following circumstances, and only to the extent strictly necessary for the stated purpose:
All third-party service providers engaged by Shell88 are subject to contractual data processing agreements that prohibit them from using Player data for any purpose other than the specific service they provide to Shell88.
Shell88 primarily processes and stores Player data on servers located in jurisdictions with established data protection frameworks. In the course of engaging payment processors, KYC providers, and cloud infrastructure partners, Personal Data may be transferred to and processed in countries outside of Malaysia.
Where such international transfers occur, Shell88 ensures that adequate safeguards are in place, which may include:
You may request details of the specific safeguards in place for any particular international transfer by contacting Shell88 Support using the details in Section 14.
Shell88 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Identity & KYC Data | 5 years from account closure, or as required by applicable anti-money laundering law |
| Financial Transaction Records | 5 years from the date of the transaction, in line with financial record-keeping obligations |
| Gaming History | 3 years from account closure, or longer where required for dispute resolution or regulatory purposes |
| Communication Records (Support) | 2 years from the date of the last communication in the relevant support case |
| Marketing Preferences | Until you withdraw consent or request erasure, whichever is earlier |
| Technical & Log Data | 12 months from collection, unless retained for longer for security investigation purposes |
Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for aggregate analytics and platform improvement purposes.
Shell88 does not retain Personal Data beyond what is necessary. Requests for early deletion are considered on a case-by-case basis — see Section 10 for your Right to Erasure.
As a data subject, you hold the following rights in respect of your Personal Data held by Shell88. These rights are genuine and enforceable. To exercise any of them, please contact Shell88 Support using the contact details in Section 14. We will respond to all valid requests within 30 days of receipt, and no later than 60 days in complex cases.
Request a copy of the Personal Data Shell88 holds about you and information about how it is processed.
Request correction of inaccurate or incomplete Personal Data in your Shell88 Account.
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Request that Shell88 restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data held.
Request receipt of your Personal Data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
Object to processing based on Shell88's legitimate interests, including profiling for fraud detection, where you have compelling grounds relating to your particular situation.
Withdraw consent to marketing communications at any time via your account notification settings or by contacting support, without affecting prior processing.
Lodge a complaint with a relevant data protection supervisory authority if you believe Shell88 has not handled your Personal Data in accordance with applicable law.
Shell88 will not charge a fee for processing rights requests, except where requests are manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply. We reserve the right to request verification of your identity before actioning any rights request to ensure we do not disclose data to an unauthorised party.
The Shell88 Platform is strictly for adults aged 21 and above. Shell88 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that an Account has been registered by a person under 21 years of age, we will immediately suspend the Account, delete the associated Personal Data (subject to any legal obligation to retain records of the underage access event), and return any deposited funds net of prior withdrawals.
If you are a parent or guardian and believe that a minor in your care has created a Shell88 Account, please contact us immediately using the details in Section 14. We will treat all such notifications as high-priority and take action promptly.
Underage gambling is strictly prohibited. If you are under 21, you must not use the Shell88 Platform. Shell88 employs age verification controls and reserves the right to request documentary proof of age from any Player at any time.
Shell88 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
Notwithstanding the above measures, no method of electronic transmission or storage is 100% secure. Shell88 cannot guarantee absolute security but undertakes to maintain security measures consistent with industry best practice for online gaming platforms of comparable scale.
Shell88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your Personal Data is processed or your rights as a data subject — Shell88 will provide advance notice of at least seven (7) days by email to your registered email address and/or a prominent notice displayed on the Platform.
Non-material amendments (such as typographical corrections, clarifications of existing practices, or structural reformatting that does not affect substance) may be made without prior notice. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement and acceptance of the amended terms. If you do not agree with the amended Policy, you should stop using the Platform and may request account closure in accordance with Shell88's Terms & Conditions.
For any questions, concerns, or requests relating to this Privacy Policy or Shell88's handling of your Personal Data, please contact our Data Support team using the details below. All privacy-related requests will be handled by a dedicated team member, not a generic support queue.
Shell88 Privacy & Data Support
Support hours: Daily, 10:00am – 2:00am MYT
Email (plain text — not a link): [email protected]
Serving players across Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and all of Malaysia.
When submitting a data rights request, please include your registered email address or username so we can verify your identity and locate your account records. We aim to acknowledge all privacy-related contacts within 2 business days and to resolve straightforward requests within 30 calendar days.
We believe you should know exactly how your data is used — and that it stays with us, not sold to marketing networks. Explore the platform with confidence. For players aged 21 and above only.
Play responsibly. 21+ only. This Privacy Policy was last updated on 1 January 2026.