Privacy Policy

1

Introduction

Shell777 ("we", "us", "our or "the Platform") is committed to protecting the personal data of all users who interact with the shell777 website athttps://shell777.cam. This Privacy Policy sets out our data handling practices in a clear, structured format, consistent with the responsibilities of an operator serving Malaysian users.

This policy applies to all personal data collected through the shell777 website, including data provided during account registration, payment processing, customer support interactions and general browsing activity. It also applies to data collected through any associated mobile or desktop application that links to this policy.

This Privacy Policy should be read together with the shell777 Terms & Conditions and Responsible Gambling policy. Together, these documents form the complete regulatory and contractual framework governing your relationship with the platform.

2

Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

Term	Meaning
Personal Data	Any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, contact details and online identifiers.
Processing	Any operation performed on personal data, whether automated or manual, including collection, storage, retrieval, use, disclosure, erasure or destruction.
Data Controller	Shell777, being the entity that determines the purposes and means of processing personal data collected through the platform.
Data Processor	A third party that processes personal data on behalf of shell777 under a binding data processing agreement.
User / Data Subject	Any identified or identifiable natural person whose personal data is processed by shell777, including registered account holders and anonymous visitors.
Cookies	Small text files placed on a user's device by a website, used to store session information, preferences and analytical data.
KYC	Know Your Customer — the identity and document verification process required for account activation and withdrawals.

3

Data We Collect

Shell777 collects personal data through several channels depending on how you interact with the platform. The categories of data we collect are set out below.

3.1 Registration Data

When you create a shell777 account, we collect the information you provide during sign-up, including:

• Full legal name as it appears on a government-issued identification document.
• Date of birth — used to verify that you meet the 21+ age requirement.
• Email address and contact telephone number.
• Residential address, including city and postcode — relevant for Malaysian users in Kuala Lumpur, Shah Alam, Penang, Johor Bahru, Petaling Jaya and other locations.
• Preferred username and securely hashed version of your chosen password.

3.2 KYC and Verification Documents

To comply with applicable identity verification obligations and to protect the platform against fraud and money laundering, shell777 may request:

• A copy of a valid government-issued photo identity document, such as a Malaysian MyKad, passport or driving licence.
• A recent proof of residential address document, such as a utility bill or bank statement dated within the preceding three months.
• Proof of the payment method used, including a screenshot or image of a linked eWallet, bank account or card (with sensitive digits redacted where permitted).

3.3 Transaction and Payment Data

Shell777 records details of all financial transactions associated with your account, including deposit amounts in MYR, withdrawal requests, bonus adjustments and associated payment method references. Payment processing for methods such as Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB and Public Bank is handled through third-party processors; shell777 does not store full payment card numbers or bank account credentials on its own servers.

3.4 Technical and Usage Data

When you access the shell777 platform, our systems automatically record certain technical information, including:

• IP address and approximate geographic location.
• Device type, operating system and browser version.
• Pages visited, session duration, navigation paths and feature interactions.
• Referring URL and search terms used to arrive at the platform.

3.5 Support Communication Data

Any messages, enquiries or complaints submitted to shell777 through live chat, email or other support channels are recorded for quality assurance, training and dispute resolution purposes.

4

How We Process Your Data

Shell777 processes personal data only for clearly defined, legitimate purposes. These purposes include:

Purpose	Data Categories Used
Account creation and management	Registration data, KYC documents
Identity and age verification	KYC documents, date of birth
Processing deposits and withdrawals	Transaction data, payment method references
Fraud prevention and security monitoring	Technical data, transaction, registration data
Customer support and dispute resolution	Support communications, account and transaction data
Responsible gambling monitoring	Account activity, deposit patterns, usage data
Platform analytics and performance improvement	Technical and usage data, anonymised where possible
Regulatory compliance and audit obligations	Registration data, transaction data, KYC records

5

Legal Basis for Processing

Shell777 processes personal data one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to provide the services you have requested, including account registration, payment processing and customer support.
• Legal obligation: Processing necessary to comply with applicable laws, regulations and regulatory guidance, including anti-money-laundering (AML) and know-your-customer (KYC) obligations.
• Legitimate interests: Processing carried out for the purpose of fraud detection, platform security, responsible gambling monitoring and general service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where shell777 sends you optional marketing communications or uses non-essential cookies, we will request your specific, informed consent in advance. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6

Data Sharing and Disclosure

Shell777 does not sell personal data to third parties. We may share personal data only in the following circumstances:

6.1 Service Providers and Data Processors

Shell777 engages third-party service providers to assist with payment processing, identity verification, fraud screening, platform analytics and customer support systems. These parties are bound by data processing agreements and may only process personal data according to shell777's documented instructions.

6.2 Legal and Regulatory Disclosures

Shell777 may disclose personal data to law enforcement agencies, regulatory bodies or other authorised authorities where required by applicable law, court order or regulatory directive. Such disclosures are made to the minimum extent necessary and, where legally permissible, we will inform you that a disclosure has been made.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the shell777 business, personal data may be transferred to the acquiring entity as part of that transaction. We will take reasonable steps to ensure that the receiving entity maintains equivalent data protection standards.

7

Cookies and Tracking Technologies

Shell777 uses cookies and similar tracking technologies to support the operation of the platform, improve the user experience and gather aggregate analytical data. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the platform to function correctly, including session management, authentication tokens and security features. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional cookies: Store user preferences such as language settings, display options and previously selected game categories to personalise the browsing experience on return visits.
• Analytical cookies: Collect anonymised or pseudonymised data about how users navigate the platform, which pages receive the most engagement and where technical errors occur. This data is used solely to improve platform performance.
• Marketing cookies (optional): Used only with your explicit prior consent to measure the effectiveness of promotional campaigns. These cookies may record whether you arrived at shell777 from a particular referal source.

You may manage cookie preferences through your browser settings at any time. Disabling cookies may affect the availability of certain platform features. Withdrawing consent for optional cookies does not affect the lawfulness of any processing carried out before withdrawal.

8

Data Retention

Shell777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a minimum period of five years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years after the business relationship ends, or longer if required by a specific regulatory instruction or ongoing investigation.
• Transaction records: Retained for a minimum of five years following each transaction, consistent with standard financial record obligations.
• Support communications: Retained for up to three years following the resolution of the relevant enquiry or complaint.
• Technical and usage data: Retained in aggregated or anonymised form for analytical purposes; raw identifiable data is deleted within twelve months of collection unless required for an active investigation.

When personal data is no longer required, shell777 applies secure deletion or anonymisation procedures consistent with applicable data protection standards.

9

Your Rights as a User

Subject to applicable law and the specific circumstances of each request, you have the following rights in relation to the personal data shell777 holds about you:

To exercise any of the above rights, please contact shell777 support at [email protected] with a clear description of your request and sufficient information to identify your account. Shell777 will respond within a reasonable timeframe and may request additional verification before processing sensitive requests.

10

Data Security Measures

Shell777 implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser and the shell777 platform.
• Encrypted storage of sensitive account credentials, including password hashing using industry-standard algorithms.
• Access controls limiting internal data access to personnel who require it for their specific function, operating on a least-privilege basis.
• Regular review of system access logs and anomaly detection monitoring to identify potential unauthorised access attempts.
• Contractual data security obligations imposed on all third-party processors with access to shell777 user data.

While shell777 takes reasonable steps to maintain platform security, no internet-connected system can guarantee absolute security. Users are also responsible for maintaining the security of their own devices and account credentials. If you believe your account has been compromised, please contact shell777 support immediately.

11

Children and Minors

Shell777 does not knowingly collect personal data from any individual under the age of 21. The platform is strictly intended for adult use only, in compliance with applicable gambling age requirements. If shell777 determines that an account has been registered by or on behalf of a person under 21, the account will be immediately closed, all associated data will be reviewed for compliance purposes and any funds held may be withheld pending investigation.

12

Updates to This Policy

Shell777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform functionality. Where changes are material, we will notify registered users by posting a notice on the platform or by email to the address held on their account.

The date at the top of this page reflects the most recent revision. We encourage users to review this policy periodically. Continued use of the shell777 platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms.

13

Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the personal data shell777 holds about you, please contact our support team using the details below. When submitting a data rights request, please include your account reference number and a clear description of your request to help us respond efficiently.

• Support email: [email protected] (plain text — not a clickable link)
• Live chat: Available 24 hours a day, 7 days a week via the platform interface
• Response target: Acknowledgement within 24 hours; substantive response within a reasonable period depending on request complexity

Do not include your full password, complete payment card number or full bank account number in any support or data rights communication.