This Privacy Policy sets out how shell888 collects, processes, stores, and protects the personal data of its users. We are committed to handling your information responsibly, in accordance with applicable data protection principles and our obligations under international online gaming licensing requirements.
shell888 uses 256-bit SSL encryption across all data transmissions. Your personal information, payment details, and account data are stored in secured, access-controlled environments and are never sold to third-party advertisers.
shell888 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data shared with service partners is limited to what is strictly necessary for the operation of the Platform and is governed by binding data processing agreements.
You have the right to access, correct, restrict, and request deletion of your personal data held by shell888. Requests can be submitted at any time through our support channels and will be processed within a reasonable timeframe.
Payment data processed through Touch 'n Go eWallet, DuitNow, FPX, and cryptocurrency channels is handled directly by PCI-compliant payment processors. shell888 does not store complete card numbers, full bank account details, or private cryptocurrency keys.
shell888 uses cookies and similar tracking technologies to maintain session state, improve platform performance, and understand user behaviour in aggregate. You can manage non-essential cookie preferences at any time through your browser settings.
Identity documents submitted for KYC verification (such as your MyKad or passport) are stored securely and used exclusively for verification purposes. Documents are not shared with third parties except as required by our licensing obligations or applicable law.
This Privacy Policy (hereinafter referred to as "this Policy" or "the Policy") is issued by shell888 (hereinafter "shell888", "we", "us", or "our") and applies to all personal data collected through or in connection with the shell888 online gaming platform accessible at https://shell888.cam and any associated subdomains or mobile interfaces (collectively, "the Platform").
shell888 takes the privacy and security of your personal data seriously. This Policy is designed to be transparent about what data we collect, why we collect it, how we process and protect it, how long we retain it, and what rights you have over it. We encourage you to read this Policy carefully before registering an Account or using any feature of the Platform.
By registering an Account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data in the manner described herein. If you do not agree with any part of this Policy, you should discontinue your use of the Platform and contact us to close your Account.
A Note for Malaysian Users: shell888 is committed to responsible data handling for all our members, including the hundreds of thousands of players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and the rest of Malaysia. Your personal data is processed in accordance with the principles established under this Policy, and we apply internationally recognised data protection standards to all personal information we handle.
For the purposes of this Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, including but not limited to name, identification number, email address, IP address, financial data, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether automated or manual. |
| "Data Controller" | shell888, which determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third party engaged by shell888 to process personal data on its behalf, including payment processors, KYC verification providers, and cloud infrastructure providers. |
| "User" / "You" | Any individual who registers an Account on, visits, or otherwise interacts with the Platform. |
| "KYC Documents" | Identity and address verification documents submitted by a User in connection with the Know Your Customer verification process, including but not limited to Malaysian MyKad, passport, utility bills, and bank statements. |
| "Cookies" | Small text files placed on your device by the Platform for the purposes described in Section 10 of this Policy. |
| "Account" | The personal user account created by a User upon successful registration on the Platform. |
shell888 collects personal data that is necessary for the legitimate operation of the Platform, including the provision of gaming services, payment processing, identity verification, fraud prevention, and customer support. The categories of personal data we collect are set out below.
shell888 collects personal data through the following channels and mechanisms:
The majority of the personal data we hold is provided directly by you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or interact with any feature of the Platform that requires input.
Certain technical and device data is collected automatically when you access the Platform, including IP address, browser information, device identifiers, and session activity. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 10.
shell888 may receive personal data from third-party service providers in the following circumstances:
shell888 does not purchase personal data lists from data brokers or third-party marketing companies. All data received from third parties is limited to what is operationally necessary for the specific service being provided.
shell888 processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we process personal data are set out in the table below:
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your Account, processing login authentication, managing account settings, and handling account closures or suspensions. |
| Identity Verification | Conducting KYC verification to confirm your identity, age (minimum 21 years), and eligibility to use the Platform in accordance with our licensing obligations. |
| Payment Processing | Processing deposits and withdrawals via your selected payment method, including e-wallets, bank transfers, and cryptocurrency channels. |
| Game Provision | Delivering casino games, live dealer tables, sports betting markets, and other gaming products, and maintaining accurate game session and transaction records. |
| Fraud Prevention & Security | Detecting and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct, including through automated risk monitoring systems. |
| Regulatory Compliance | Fulfilling obligations under our international gaming licence, including anti-money-laundering (AML) record-keeping, responsible gambling monitoring, and responding to lawful regulatory requests. |
| Customer Support | Responding to enquiries, resolving complaints, processing account-related requests, and maintaining records of support interactions for quality and dispute resolution purposes. |
| Responsible Gambling | Monitoring gaming activity patterns to identify signs of problem gambling and administering responsible gambling tools including deposit limits, cool-off periods, and self-exclusion. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and product development. |
| Marketing Communications | Sending promotional communications, bonus notifications, and personalised offers where you have consented to receive such communications. You may withdraw marketing consent at any time. |
shell888 processes your personal data on one or more of the following legal bases:
Processing is necessary for the performance of the contract between you and shell888 — specifically, the provision of gaming services under the Terms and Conditions you accepted upon registration. This covers account creation, deposit and withdrawal processing, game delivery, and customer support.
Processing is necessary for shell888 to comply with its legal and regulatory obligations, including KYC verification requirements under its international gaming licence, anti-money-laundering record-keeping obligations, and age verification requirements.
Processing is necessary for the legitimate interests of shell888 or third parties, where those interests are not overridden by your privacy rights. This includes fraud detection and prevention, IT security, Platform integrity monitoring, and aggregated analytics for service improvement.
Where processing is based on consent — including marketing communications and certain non-essential cookies — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
shell888 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:
shell888 engages trusted third-party service providers to perform functions on our behalf. These providers act as data processors and may only process personal data in accordance with our written instructions and for the specific purposes described. Categories of service providers include:
shell888 may disclose personal data to regulatory authorities, law enforcement agencies, or other competent bodies where required by applicable law, a court order, or our obligations under our international gaming licence. Such disclosures will be limited to what is strictly required by the applicable legal obligation.
In the event of a merger, acquisition, restructuring, or sale of all or part of shell888's business, personal data held by shell888 may be transferred to the successor entity as part of the transaction, subject to the transferee maintaining equivalent or higher data protection standards.
Our Commitment: shell888 never discloses your personal data to advertisers, data brokers, or marketing companies. We do not use your gaming activity or personal profile to sell targeted advertising to third parties.
shell888 retains personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting obligations.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of Account plus 5 years post-closure | Legal & licensing obligation |
| KYC Identity Documents | 5 years from Account closure | AML regulatory requirement |
| Transaction Records | 7 years from transaction date | Financial record-keeping obligation |
| Game Session Logs | 3 years from session date | Dispute resolution & regulatory audit |
| Support Communications | 3 years from last interaction | Dispute resolution & service improvement |
| Marketing Preferences | Until consent is withdrawn or Account is closed | Consent-based processing |
| Technical & Device Logs | 12 months from collection | Security & fraud prevention |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised or aggregated data may be retained indefinitely for statistical and service improvement purposes.
shell888 implements and maintains appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
While shell888 takes all reasonable precautions to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. You also have an important role to play — maintaining the confidentiality of your Account credentials and notifying us immediately if you suspect any unauthorised access to your Account.
shell888 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device when you visit the Platform. They enable the Platform to recognise your device, maintain your session, and collect information about how the Platform is used.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Required for the Platform to function, including session management, login authentication, and security token maintenance. Without these cookies, the Platform cannot operate. | No — essential to functionality | |
| Collect aggregated, anonymised data about how users interact with the Platform — such as pages visited, time on site, and navigation paths — to help us improve the user experience. | Yes — via browser settings | |
| Remember your preferences such as language settings, display options, and previously entered form data to provide a more personalised experience on return visits. | Yes — via browser settings | |
| Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. shell888 does not use marketing cookies to share data with third-party advertisers. | Yes — via browser settings |
You can manage or disable non-essential cookies through your browser's settings at any time. Most modern browsers allow you to block or delete cookies, though doing so may affect certain features of the Platform. Instructions for managing cookies are available in the help documentation of your specific browser.
Subject to applicable law and the terms of this Policy, you have the following rights in relation to personal data held by shell888. Requests to exercise any of these rights may be submitted through our live chat support or by email to [email protected].
Request a copy of the personal data shell888 holds about you, together with information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your Account or our records.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that processing of your personal data be restricted — for example, while a dispute about accuracy is resolved.
Receive a copy of personal data you have provided to us in a structured, machine-readable format where technically feasible.
Object to processing based on legitimate interests, including direct marketing. Marketing opt-out takes effect immediately upon request.
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Submit a formal complaint regarding our handling of your personal data. shell888 will acknowledge and respond within 14 business days.
shell888 will respond to all data rights requests within 30 calendar days of receipt of a valid, verifiable request. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reasons for it. We may ask you to verify your identity before processing a request to ensure we are disclosing information to the correct individual.
shell888 is strictly an adult platform. The Platform is not directed at individuals under the age of 21, and we do not knowingly collect personal data from anyone under this age. Age verification is a mandatory component of the KYC process — all accounts are verified against submitted identity documents to confirm that the account holder meets the minimum age requirement of 21 years.
If shell888 becomes aware that personal data has been collected from an individual under the age of 21, the account will be closed immediately, the relevant data will be deleted or pseudonymised in accordance with applicable law, and any funds held in the account will be subject to review in accordance with our Terms and Conditions.
If you are a parent or guardian and believe that your child has created an account on the Platform, please contact our support team immediately at [email protected] so that we can take prompt action.
🔞 Age Restriction: shell888 is for players aged 21 and above only. We enforce this requirement strictly through mandatory identity verification. Underage gambling is illegal and harmful.
As an internationally licensed online gaming platform, shell888 may transfer and process your personal data outside of Malaysia and the jurisdiction in which you are located. This may occur when data is processed by our cloud infrastructure providers, KYC service providers, or game software providers who operate data centres in other countries.
Where personal data is transferred internationally, shell888 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to or higher than the protections described in this Policy. These safeguards may include contractual data protection clauses, vendor security assessments, and binding service agreements that restrict the use of transferred data.
By using the Platform, you acknowledge and consent to the transfer of your personal data as described in this section.
shell888 reserves the right to amend this Privacy Policy at any time to reflect changes in law, regulatory requirements, our data processing practices, or the structure of the Platform. Where amendments are material, we will notify registered Users by email to the address held on file and will display a prominent notice on the Platform for a reasonable period prior to the changes taking effect.
The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and contact us to close your Account.
We encourage you to review this Policy periodically so that you remain informed about how we are protecting your personal data.
If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights described in Section 11, please contact shell888 through the following channels:
shell888 is committed to acknowledging all privacy-related correspondence within 2 business days and resolving substantive data rights requests within the applicable statutory timeframe. For urgent matters relating to suspected unauthorised access to your Account, please contact us via live chat immediately — this channel is monitored around the clock, including weekends and Malaysian public holidays.
For general platform questions, account queries, and support matters not specifically related to data privacy, please refer to our FAQ page or contact our live chat support team directly from your Account dashboard.
shell888 offers over 2,400 games, fast withdrawals via Touch 'n Go eWallet and DuitNow, and a six-tier VIP programme — all built for Malaysian players aged 21 and above. Your data is safe with us.
🔞 For players aged 21 and above only. Gamble responsibly. shell888 operates under international online gaming licensing.