Shell66 takes the privacy of every member seriously. This document transparently explains how we collect, use, store and protect your personal data as a platform user in Malaysia.
Data Protection Commitment
Shell66 builds trust through transparency — not empty promises
All data transmitted between your device and shell66 servers is encrypted using 256-bit SSL. This means your personal and financial information cannot be read by any third party during transmission.
Shell66 has never and will never sell your personal data to any third party for marketing purposes. Your data belongs to you alone — it is not a commodity we trade with external advertisers.
You have the right to access, correct, download, and request deletion of your personal data at any time. The Shell66 privacy team will process each request within the stipulated timeframe.
Your personal data is stored in data centres protected by strict physical and digital access controls. Internal access to sensitive data is granted only to authorised personnel with a specific operational need.
In the event of any security incident involving your data, shell66 is committed to notifying you within 72 hours of the incident being identified, in line with industry best practices.
The Shell66 Privacy Policy is built on the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure all data handling practices comply with applicable local legislation.
By using the Shell66 platform, you agree to the collection and use of information as described in this Privacy Policy. Please read this document carefully and contact us if you have any questions.
Shell66 ("we", "Platform") operates under the domain shell66.app and is committed to protecting the privacy of all users who register and use our services. This Privacy Policy clearly describes the types of data we collect, the purposes for which it is used, and how we protect it.
This policy applies to all your interactions with Shell66 — including use of the website, mobile app, customer support, and any communication between you and our team. It also applies to all data received through the identity verification (KYC) process conducted for compliance purposes.
Shell66 acts as the responsible data controller in determining the purposes and means of processing your personal data. We ensure that all data processing is carried out on a valid legal basis and does not exceed what is necessary for the stated purposes.
Shell66 fully complies with the Malaysian Personal Data Protection Act 2010 (PDPA). Any personal data processing we carry out is based on one of the following grounds: your consent, contractual requirements, legal obligations, or our legitimate interests that do not override your fundamental rights.
Shell66 collects your personal data through several key channels. Below is a comprehensive overview of the types of data we collect and their sources:
Shell66 does not collect credit or debit card information directly. All payments are processed through certified payment service providers that comply with PCI-DSS standards, meaning your card data never passes through or is stored in shell66's systems.
Every piece of data we collect is used for a specific and legitimate purpose. Below is a summary table of our data processing purposes:
| Processing Purpose | Type of Data Used | Legal Basis |
|---|---|---|
| Identity verification & KYC | Name, date of birth, official documents | Legal obligations |
| User account management | Email, password, phone number | Contractual requirements |
| Deposit & withdrawal processing | Bank account / e-wallet information | Contractual requirements |
| Security & fraud prevention | IP, session data, transaction records | Legitimate interests |
| Platform improvements | Usage data and device information | Legitimate interests |
| Marketing communications (where permitted) | Email, phone number | Your consent |
| Regulatory compliance & audit | Transaction records, identity data | Legal obligations |
Shell66 will not use your data for purposes beyond those stated above without obtaining your consent first. You may withdraw consent for marketing communications at any time through your account settings.
Shell66 does not sell, rent, or trade your personal data to third parties. However, in the course of operating the platform, we work with certain parties that may require limited access to some of your data:
All third parties working with shell66 are bound by strict data confidentiality agreements and are required to meet security standards equal to or exceeding those of shell66. They are only permitted to use your data for specified purposes and may not use it for any other reason.
Shell66 continuously invests in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we implement include:
SSL/TLS 256-bit for data in transit; AES-256 encryption for data stored in the database.
Two-factor authentication (2FA) for all staff accounts and systems based on least privilege principles.
Intrusion detection systems (IDS) and continuous around-the-clock security log monitoring.
Automatic daily data backups to geographically separate locations for disaster recovery.
Shell66 retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes stated in this Policy. Once an account is closed, your data will be retained for the period required by law (typically 7 years for financial records) before being securely deleted.
Shell66 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you browse our platform.
You can manage or delete cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of some parts of the Shell66 platform.
As a data subject, you have certain rights regarding your personal data held by shell66. We facilitate the exercise of these rights through clear and easily accessible channels:
You have the right to obtain a copy of the personal data we hold about you in a readily readable format.
You have the right to request correction of any inaccurate or incomplete personal data held in our records.
Under certain circumstances, you may request deletion of your personal data, subject to our legal obligations.
You may request that we restrict how we process your data in certain situations provided for under applicable law.
You have the right to receive your data in a structured, machine-readable format for transfer to another platform if desired.
You may object to the processing of your personal data for direct marketing purposes at any time, without condition.
To exercise any of the above rights, please contact our privacy team via the in-platform support system. shell66 will process each request within 30 business days from the date of receipt of the completed request.
The shell66 platform is not intended for children or individuals under the age of 18. shell66 does not knowingly collect personal data from individuals under the age of 18.
If we discover that a child's personal data has been collected without our knowledge, that data will be deleted immediately and the relevant account will be closed. Parents or guardians with concerns about this matter are encouraged to contact our support team directly.
Parents and guardians are responsible for monitoring their children's online activity. Shell66 encourages the use of appropriate parental control software to prevent unauthorised access by minors to online gaming platforms.
The shell66 platform may contain links to third-party websites or services in certain contexts. shell66 is not responsible for the privacy practices or content of those third-party websites.
We encourage you to read the privacy policy of every website you visit outside the Shell66 platform. This Privacy Policy applies only to information collected by Shell66 through our own platform.
Shell66 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, or new legal requirements.
When significant changes are made, we will:
Your continued use of the shell66 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
If you have any questions, concerns or wish to exercise your personal data rights, please contact the shell66 privacy team through the following channels:
Our privacy team will respond to every enquiry within 3 business days. For formal data rights requests, please use the official request form available in your account settings to ensure your request is processed efficiently.
Shell66 takes every privacy-related complaint seriously. If you believe we have not processed your data in accordance with this Privacy Policy or the provisions of the PDPA, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
Shell66 ensures every aspect of your data security is prioritised. Register today and enjoy a safe, fair and enjoyable gaming experience with the peace of mind you deserve.