Privacy & Data Security

Privacy Policy shell88

Your privacy is our priority. This document transparently explains how shell88 collects, uses, stores, and protects your personal data while you use our platform in Malaysia.

Updated: January 2026 Applicable in Malaysia 256-bit SSL Encryption

How Shell88 Protects Your Data

We invest in the latest security technologies and procedures to ensure your personal data remains safe and protected at all times.

Military-Grade Encryption

All data transmitted between your device and shell88 servers is protected with 256-bit SSL encryption — the same technology used by leading financial institutions and banks worldwide.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered access controls, advanced firewalls, and round-the-clock security monitoring.

User Data Controls

You have the full right to access, correct, or request the deletion of your personal data. Shell88 respects every member's privacy rights in accordance with applicable data protection laws.

No Data Sales

Shell88 does not sell, rent, or share your personal data with advertisers or third parties for marketing purposes without your explicit consent. Your data is not our commodity.

Data Collection Minimisation

We only collect information that is strictly necessary to operate our services and ensure legal compliance. No excess data is collected without a clear purpose.

Communication Controls

You may opt out of marketing communications at any time through your account settings. Shell88 respects your preferences and will not send unwanted communications.


This Privacy Policy applies to all users who access the Shell88 platform via the shell88.win website or our official mobile app. By registering or continuing to use our services, you agree to the terms set out in this document.

At Shell88, we understand that your trust is the foundation of our relationship. As a leading online sports betting and gaming platform in Malaysia, we take full responsibility for handling your personal data in a transparent, secure, and ethical manner.

This Privacy Policy is designed to help you clearly understand what data we collect, why we need it, how we use it, and what rights you have regarding that data. We avoid complicated language — we want you to fully understand your rights and responsibilities before using our platform.

1Information We Collect

Shell88 collects various types of information depending on how you interact with our platform. Generally, the data we collect falls into three main categories:

A. Information You Provide Directly

  • Full name as stated on official identification documents
  • Malaysian identification card number (MyKad) or passport number
  • Date of birth for age verification purposes
  • Email address and mobile phone number
  • Current residential address
  • Bank account or e-wallet details for processing deposits and withdrawals
  • Selfie photos or documents uploaded during the KYC (Know Your Customer) process

B. Automatically Collected Information

  • IP address and approximate geographic location
  • Device type, model, and operating system used
  • Web browser type and version
  • Access log data including date, time, and pages visited
  • Gaming session records and betting history
  • Cookie and related tracking technology information

C. Information from Third Parties

  • Verification data from third-party KYC service providers we engage
  • Information from payment service providers for transaction verification purposes
  • Compliance data from relevant regulatory bodies where required by law
shell88 practises the principle of data minimisation — we only collect information that is genuinely necessary for the legitimate operation of the platform. We do not collect sensitive data such as your health information, religious beliefs, or political views.

2How We Use Your Data

Every piece of information we collect is used for a clear and lawful purpose. Below is a summary table of data usage along with the legal basis supporting each purpose:

Purpose of Use Data Type Legal Basis
Registration & account management Name, email, phone number Contract performance
Identity verification (KYC) MyKad, facial photo, documents Legal obligation
Deposit & withdrawal processing Bank and e-wallet information Contract performance
Fraud prevention & security IP address, activity logs Legitimate interests
Anti-money laundering compliance Financial and identity information Legal obligation
Customer service communications Email, phone number Contract performance
Platform improvement & analytics Usage data, cookies Legitimate interests
Marketing communications (with consent) Email, phone number Consent

Shell88 will not use your data for any purpose beyond those listed above without first notifying you and obtaining your consent where required. We are committed to being fully transparent about how we handle your information.

3Information Sharing

Shell88 does not sell your personal data to any party. However, there are certain situations where we need to share some of your information with specific parties to ensure the platform operates smoothly and remains legally compliant:

  • Payment Service Providers: shell88 works with FPX, Touch 'n Go, GrabPay, Boost, and DuitNow providers. Transaction data is shared in a limited and secure manner solely to process your deposits and withdrawals.
  • KYC Service Providers: Your identity verification information is shared with accredited third-party KYC providers to ensure compliance with anti-money laundering regulations.
  • Game Providers: Minimum required data is shared with game providers to enable gameplay and ensure game integrity.
  • Legal Authorities: shell88 will disclose required information to law enforcement agencies or regulatory bodies when mandated by a court order or applicable law.
  • Technical Service Providers: Our infrastructure, cloud computing, and cybersecurity service providers may have limited access to data for strictly technical purposes.

Every third party with whom we share data is bound by strict confidentiality agreements and must comply with data protection standards equal to our own. shell88 takes full responsibility for ensuring that our chosen third parties adhere to the privacy standards we have set.

shell88 does not share your data with advertisers, third-party companies for marketing purposes, or any other commercial entity without your explicit consent. Your privacy is not our business commodity.

4Data Security

Shell88 invests seriously in industry-grade data security infrastructure. The following are the technical and organisational measures we implement to protect your information:

SSL/TLS 256-bit Multi-Layer Firewall AES-256 Encryption Sensitive Data Masking 24/7 Monitoring 2FA verification Automatic Backup Penetration Testing

Data stored in our systems is protected using AES-256 encryption — the security standard used by leading banks and government institutions worldwide. User passwords are never stored in plain text; instead, we use a one-way hashing algorithm that cannot be decrypted.

The shell88 internal security team conducts real-time threat monitoring 24 hours a day, 7 days a week. Any unusual activity is detected and addressed immediately before it can impact user data. We also conduct periodic penetration testing by independent security experts to identify and resolve any system vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system is completely immune to all cyber threats. We encourage you to also play your part in keeping your account secure by using a strong password and enabling two-factor authentication (2FA).

5Cookies & Tracking Technologies

Shell88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as they are critical to platform operation.
  • Performance Cookies: Helps us understand how users interact with the platform for improvement purposes. Data collected is anonymised.
  • Functional Cookies: Remembers your preferences and settings such as language, region, and display preferences to deliver a more personalised experience.
  • Analytics Cookies: Used to collect aggregated platform usage statistics to help us make more informed improvement decisions.

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect the functionality of the Shell88 platform. For non-essential cookies, you may grant or withdraw your consent at any time via the privacy settings panel in your account.

6Your Rights Regarding Personal Data

As a shell88 user, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 30 business days.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request a correction. You can update most information directly through your account panel.

Right to Erasure

You may request the deletion of your personal data. However, certain data may need to be retained for a specified period to fulfil legal obligations, such as financial records and AML compliance.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes. Once we receive your objection, we will immediately stop using your data for that purpose.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider upon request.

To exercise any of the above rights, please contact our data protection team via email at [email protected]. All requests will be processed within 30 business days from the date of receipt.

7Data Retention Period

Shell88 does not retain your personal data indefinitely. Data retention periods are determined based on the purpose of collection and applicable legal requirements:

Data Categories Retention Period Reason
Active account information Throughout the active account period Service management
Financial transaction records 7 years after transaction Legal obligation
KYC Documents 5 years after account closure AML Compliance
Support communication logs 3 years Dispute resolution
Session data & access logs 90 days Security & audit
Marketing data (with consent) Until consent is withdrawn User consent

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. The deletion process follows industry-standard methods to ensure data cannot be recovered.

8Links to Third-Party Sites

The shell88 platform may contain links or integrations with third-party services such as payment providers and game suppliers. Each of these third parties maintains their own privacy policy, separate from ours.

Shell88 is not responsible for the privacy practices or content of third-party websites or services. We recommend that you read and understand the privacy policy of every service provider you use within our platform ecosystem.

When you use payment services such as FPX, Touch 'n Go eWallet, or GrabPay, your transactions are also subject to the respective provider's privacy policy. Shell88 has no control over how they handle your data outside the scope of transactions related to your Shell88 account.

9Child Protection

Shell88 is an adult entertainment platform open only to individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

Our registration process includes strict age checks and identity verification to ensure compliance with this minimum age requirement. Should we discover that personal data of an underage individual has been inadvertently collected, we will take immediate steps to delete that information and close the associated account.

Parents or guardians who are concerned that their child may have registered on the Shell88 platform are urged to contact us immediately at [email protected] so that immediate action can be taken.

10Privacy Policy Amendments

Shell88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or technological advancements. Any material amendments will be communicated to you through:

  • Prominent notices on the shell88.win website homepage
  • Email notification to the address registered in your account
  • In-app notifications on the shell88 mobile app

Amendments will take effect within 14 days of notice being given, except where changes are immediately required by law. Continued use of the shell88 platform after an amendment notice is considered your acceptance of the updated terms.

If you do not agree with any amendments to this Privacy Policy, you have the right to close your account and stop using Shell88's services. We will respect your decision and process the account closure in accordance with our standard procedures.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact our data protection team at [email protected]. We are committed to responding to every inquiry seriously and within a reasonable timeframe.

The latest version of this Privacy Policy takes effect as of January 2026. The last updated date will always be displayed at the top of this page for your reference.

Your Data is Safe. Your Experience is Guaranteed.

With a transparent privacy policy and industry-grade security, Shell88 is the online entertainment platform you can fully trust in Malaysia.

Bahasa Melayu