Privacy Policy shel77 –
Member Data Protection & Privacy

1Information We Collect

Shel77 collects various types of information from members in order to operate the platform securely, comply with regulatory requirements, and deliver a better experience. The following are the main categories of information we collect:

A. Information You Provide Directly

• Full name as stated in your official identification document.
• Date of birth and identity card or passport number.
• Active email address and mobile phone number.
• Current residential address including postcode and state.
• Bank account details or payment method for processing deposits and withdrawals.
• KYC supporting documents such as identity card images, utility bills, and bank statements.
• Any communications you send to our customer support team.

B. Information Collected Automatically

• IP address and geolocation data based on your internet connection.
• Web browser type, operating system version, and device language settings.
• Login and logout records with timestamps.
• Gaming activity history, including bets, wins, and losses.
• Complete deposit and withdrawal transaction history.
• Website interaction data such as pages visited and time spent on each page.
• Mobile device information including device type and unique device identifier (device ID).

2How We Use Your Data

Collected information is used solely for legitimate and stated purposes. shel77 ensures every use of data has a sound legal basis, whether grounded in your consent, contractual necessity, legal obligation, or the platform's legitimate interests.

Shel77 will not use your data for any purpose other than those stated above without first obtaining your separate consent.

3Data Sharing with Third Parties

Shel77 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may need to share certain information with the following parties:

• Payment Service Provider: Payment gateways used to process deposits and withdrawals require relevant transaction information. All such providers are subject to strict PCI-DSS security standards.
• Game Software Provider: Third-party game providers may receive technical data required to run games smoothly. This data is limited to game session information only.
• Regulatory Authority: shel77 is required to disclose certain information to the relevant authorities when mandated by law, including investigations related to money laundering or fraud.
• Identity Verification Provider: The third-party KYC service we use receives your identity verification documents for verification purposes only.
• Cloud Technology Provider: Data is stored in secure cloud infrastructure under binding confidentiality agreements between shel77 and the relevant providers.

All third parties that receive shel77 member data are required to sign a data processing agreement upholding the same privacy and security standards as shel77's internal policies.

4Cookies & Tracking Technologies

Shel77 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze platform usage patterns. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collects anonymous data on how members use the platform to help us improve the user experience. All data is aggregated and does not identify individuals.
• Functional Cookies: Saves your preferences such as interface language, display settings, and game preferences so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helps us understand platform performance, the most frequently visited pages, and areas that may need improvement. This data is used solely for internal purposes.

You can manage cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and your experience on the shel77 platform. Session cookies are automatically deleted when you close your browser, while persistent cookies are stored until their set expiry period or until you manually delete them.

5Data Security Measures

Protecting member data is shel77's top priority. We continuously invest in security infrastructure and industry best practices to keep your information safe at all times:

• End-to-End Encryption: All sensitive data is encrypted using TLS 1.3 protocol during transmission and stored in encrypted format using AES-256 standard.
• Two-Factor Authentication (2FA): shel77 supports two-factor authentication for an additional layer of protection on your account. We encourage all members to enable this feature.
• Continuous Security Monitoring: Our automated monitoring system operates 24 hours a day, 7 days a week to detect suspicious activity, intrusion attempts, or unusual access patterns.
• Regular Penetration Testing: shel77 conducts regular security testing by independent security experts to identify and patch any vulnerabilities in our systems before they can be exploited.
• Internal Access Controls: Access to member data within shel77 is restricted based on the need-to-know principle. All data access is logged for audit and accountability purposes.
• Secure Data Backup: Member data is regularly backed up to a separate, secure location to ensure service continuity in the event of a system disruption or technical disaster.

6International Data Transfers

In the course of its global operations, shel77 may need to transfer your personal data to servers or third parties located outside Malaysia. Any such data transfer is carried out in compliance with applicable data protection regulations and with assurance that an equivalent level of protection exists at the transfer destination.

The safeguards we apply to international data transfers include:

• Use of approved Standard Contractual Clauses to ensure adequate data protection.
• A thorough assessment of the destination country's data protection framework before any transfer is carried out.
• Binding data processing agreements with all international data recipients.
• Data encryption during transmission regardless of the destination location.

You can find out more about the specific data transfer mechanisms we use by contacting our data protection team.

7Your Rights Regarding Personal Data

As a data subject, you hold a range of guaranteed rights regarding your personal information held by shel77. We fully respect these rights and are committed to processing any related requests within the stipulated timeframe:

To exercise any of the rights above, please contact the shel77 data protection team via email at [email protected] by stating the type of request and your account information. We will process your request within 30 calendar days and inform you of the action taken.

8Data Retention Period

Shel77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. Our data minimisation principle ensures no data is kept longer than necessary.

• Active account data: Retained for the duration your account remains active and for 5 years after account closure for audit and legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering and tax law requirements.
• KYC Records: Retained for 5 years from the date of verification or account closure, whichever is later.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Login data and activity: Retained for 12 months for security and fraud prevention purposes.
• Cookies and tracking data: Duration varies by cookie type — session cookies are deleted when the browser is closed, while persistent cookies are stored for between 30 and 365 days.

Once the retention period expires, your data will be securely deleted or permanently anonymised so that it can no longer be associated with you as an individual.

9Children's Privacy

The shel77 platform is an online gaming service intended exclusively for users aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

The shel77 registration process requires age verification as part of our KYC procedure. If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that data and close the associated account.

10Amendments to This Privacy Policy

Shel77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements to the services we offer. We are committed to notifying members of any significant changes.

• Any material amendments will be notified via email to the address registered in your account, at least 14 days before the changes take effect.
• The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy.
• Minor amendments such as spelling corrections or clarifications that do not alter the core meaning do not require a separate notice.
• Continued use of the shel77 platform after the effective date of any amendment constitutes your acceptance of the latest version of the Privacy Policy.

We encourage you to revisit this page from time to time to ensure you are always up to date on how we handle your data. Previous versions of the Privacy Policy are available upon request from our data protection team.

11Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the shel77 data protection team is ready to assist you.

You also have the right to lodge a complaint with the relevant data protection authority if you believe your data has been processed in a manner that violates your privacy rights. However, we encourage you to contact us first so we have the opportunity to address your concerns directly.