Privacy Policy shel99 –
Your Data, Our Responsibility

01 Information Collected

Shel99 collects your personal information when you register an account, use our platform, make deposits or withdrawals, contact our support team, or go through the identity verification (KYC) process. The types of information we collect are as follows:

We only collect information that is strictly necessary to provide the services you request. Should you choose not to provide certain required information, we may be unable to deliver some services to you.

02 How We Use Your Data

Personal information you provide to shel99 is used solely for legitimate and transparent purposes. We do not use your data for any purpose you have not consented to. Here are the primary ways we use your information:

• Setting up, managing, and maintaining your user account on the shel99 platform.
• Processing deposits, withdrawals, and all financial transactions securely.
• Verifying your identity as part of the mandatory KYC process.
• Sending important notifications related to your account, transactions, and security updates.
• Providing effective customer support whenever you contact our team.
• Monitoring and detecting any suspicious or fraudulent activity to keep you safe.
• Improving the user experience on the platform based on aggregated usage patterns.
• Complying with applicable legal requirements, regulations, and regulatory directives.
• Supporting responsible gaming programmes by monitoring concerning gameplay patterns.

Shel99 will not use your data for any third-party marketing purposes, for automated decision-making that materially affects your rights, or for any purpose that violates Malaysia's data protection laws.

03 Information Sharing

Shel99 does not sell or disclose your personal information to third parties for commercial purposes. However, there are limited situations where we may share your information with trusted parties:

• Payment Providers: Required transaction details are shared with banks, FPX, DuitNow, Touch 'n Go eWallet, and other payment providers solely for the purpose of processing your transactions.
• Technical Service Providers: Companies we engage to provide technical services such as hosting, analytics, and security support are bound by strict confidentiality agreements.
• Legal Authorities: We will disclose information when required by law, court order, or official investigation by a competent authority.
• Fraud Prevention: Information may be shared with industry fraud prevention agencies to detect and stop illegal activity.

04 Cookies & Tracking Technologies

Shel99 uses cookies and related tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform operations such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymised information about how you use our platform to help us improve our services.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details for your convenience.
• Analytics Cookies: Helping us understand aggregated usage patterns for the continuous improvement of the shel99 platform.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the usability of some platform features. For detailed instructions, please refer to your browser's help guide.

05 Data Security

Protecting your personal data is shel99's highest priority. We implement multiple layers of technical and organisational security measures to ensure your information remains protected at all times:

• 256-bit SSL encryption for all data in transit between your device and our servers.
• Encryption of sensitive data stored in our databases using industry-standard encryption algorithms.
• Role-based access control (RBAC) ensures only authorised staff can access specific data.
• Regular security audits and penetration testing conducted by independent third parties.
• Intrusion detection system (IDS) and 24/7 real-time monitoring.
• Regular data backups and tested disaster recovery procedures.
• Mandatory cybersecurity training for all shel99 staff who handle user data.

06 Data Storage & Retention

Shel99 retains your personal information for as long as your account is active or as long as necessary to provide services to you. After an account is closed, we will retain your data for a period determined by legal and regulatory requirements:

• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
• KYC and identity verification data is retained for 5 years after account closure for compliance purposes.
• Customer support communication records are retained for 3 years for reference and dispute resolution.
• Log and security data is retained for 12 months for threat analysis purposes.

Once the designated retention period has lapsed, your data will be securely deleted or anonymised so that it can no longer be associated with you. Our data deletion process ensures that information cannot be recovered once deleted.

07 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal information we hold about you. shel99 is committed to making it easy for you to exercise these rights:

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You may ask us to correct any information that is inaccurate or incomplete.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data.
• Right to Restrict Processing: You may ask us to restrict how we use your data in certain situations.
• Right to Object: You have the right to object to the processing of your data for specific purposes, such as direct marketing.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another provider.

To exercise any of the above rights, please contact the shel99 support team via live chat or email. We will process your request within 14 business days and may need to verify your identity before doing so.

08 Changes to the Privacy Policy

Shel99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant changes will be communicated to you via:

• A clear notice displayed on the shel99 website homepage.
• Notification emails sent to your registered email address.
• In-app notifications on the shel99 mobile app if you are using our application.

The date this Privacy Policy was last updated is shown at the top of this document. It is your responsibility to review this policy periodically. Your continued use of the shel99 platform after any changes take effect constitutes your acceptance of the updated policy.

09 Contact Us

If you have any questions, concerns, or complaints regarding how shel99 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• 24/7 Live Chat – Available directly on the shel99 website and mobile app.
• Privacy email: [email protected]
• WhatsApp – The official number is available on the platform's support page.

Our dedicated team will respond to all privacy-related enquiries within 48 business hours. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.