Last updated: 11 June 2026
1. Introduction
This Privacy Policy ("Policy") describes how shell96 ("shell96", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use the shell96 online gaming platform accessible at shell96.club and all associated services (collectively, the "Platform").
shell96 takes data privacy seriously. We handle all personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, and the requirement to implement appropriate technical and organisational security measures.
By registering an account on the shell96 Platform or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
2. Data We Collect
shell96 collects personal data from you in several ways, including directly when you provide it during account registration, through automated means as you interact with the Platform, and from third-party sources where permitted. The categories of personal data we may collect include:
- Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (such as Malaysian MyKad number or passport number) collected as part of KYC (Know Your Customer) verification.
- Contact Data: Email address, mobile telephone number, and residential address including postcode and state within Malaysia or other country of residence.
- Account Data: Username, encrypted password, account creation date, login history, and account status information.
- Financial Data: Payment method details (eWallet identifiers such as Touch n Go or Boost account references, bank account details for FPX transactions, or masked card numbers for Visa/Mastercard transactions), transaction history, deposit and withdrawal amounts, and wallet balance records.
- Gaming Data: Game session history, wager amounts, win/loss records, bonus activity, and VIP tier progression data.
- Technical Data: IP address, device type and operating system, browser type and version, screen resolution, time zone, and cookies or similar tracking technologies as described in Section 7.
- Communications Data: Records of your communications with shell96's customer support team via live chat, WhatsApp, or email.
- Responsible Gaming Data: Deposit limits, session time settings, self-exclusion elections, and any other responsible gaming preferences you configure in your account.
3. How We Use Your Data
shell96 uses the personal data we collect for the following purposes:
- Account Management: To register and maintain your shell96 account, verify your identity and age, and manage your account settings and preferences.
- Service Delivery: To provide access to the Platform's gaming products, process deposits and withdrawals, award bonuses, and deliver the core services you have requested.
- Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming regulations, including verifying that all players are at least 21 years of age.
- Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other activities that may be illegal or contrary to our Terms and Conditions.
- Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
- Communications: To send you service-related notifications such as transaction confirmations, account alerts, and policy updates. Where you have opted in, to send promotional communications about shell96 offers — you may opt out of marketing communications at any time.
- Platform Improvement: To analyse aggregate, anonymised usage data to understand how the Platform is used and to improve its performance, design, and content.
- Responsible Gaming: To monitor gaming patterns for indicators of problem gambling and to administer self-exclusion and deposit limit settings in accordance with your instructions.
4. Legal Basis for Processing
shell96 processes your personal data on the following legal grounds:
- Contractual Necessity: Processing required to perform the contract between you and shell96, including account registration, gaming services, and payment processing.
- Legal Obligation: Processing necessary to comply with applicable legal requirements including AML, KYC, and responsible gaming obligations.
- Legitimate Interests: Processing for purposes such as fraud detection, security monitoring, and Platform improvement, where those interests are not overridden by your data protection rights.
- Consent: Processing for marketing communications, where we have obtained your explicit prior consent. You may withdraw consent at any time by contacting [email protected].
5. Data Sharing
shell96 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients solely for the purposes described in this Policy:
- Payment Processors: Third-party payment service providers (including eWallet operators such as Touch n Go and Boost, and banking partners for FPX transactions) to process deposits and withdrawals.
- Identity Verification Providers: KYC and age verification service providers who assist in verifying player identity and age.
- Game Providers: Licensed game studios whose titles are hosted on the shell96 Platform may receive limited session and technical data necessary to deliver their gaming services.
- IT Infrastructure Providers: Cloud hosting, cybersecurity, and data storage service providers who process data on our behalf under strict contractual data protection obligations.
- Regulatory Authorities: Relevant licensing and regulatory authorities where we are required by law to disclose information.
- Law Enforcement: Where required by applicable law or a valid legal order from a competent authority.
All third parties with whom shell96 shares personal data are contractually required to implement appropriate data protection measures and to process data only for the purposes for which it was shared.
6. Data Retention
shell96 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with us and for such periods thereafter as required by applicable law or regulation. In general:
- Account and identity data is retained for a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements.
- Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
- Customer support communications are retained for up to two (2) years from the date of the last communication.
- Marketing consent records are retained for the duration of the consent period plus a reasonable additional period to demonstrate compliance.
Following the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with you.
7. Cookies & Tracking Technologies
shell96 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that allow us to recognise your browser and remember certain information about your session.
We use the following categories of cookies:
- Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, login authentication, and security features. These cookies cannot be disabled.
- Performance Cookies: Collect anonymised information about how players use the Platform, such as which pages are visited most frequently. This data is used to improve Platform performance.
- Functional Cookies: Remember your preferences such as language settings and display options to provide a more personalised experience.
- Analytics Cookies: Used by shell96 to understand aggregate usage patterns and optimise Platform design and content.
You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.
8. Security
shell96 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the shell96 Platform.
- Encryption of sensitive data fields (including passwords and payment information) at rest using industry-standard algorithms.
- Role-based access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
- Continuous security monitoring, intrusion detection systems, and regular third-party security assessments.
- Two-factor authentication (2FA) available to players as an additional layer of account protection.
While shell96 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. Players are encouraged to use strong, unique passwords and to enable 2FA on their shell96 accounts.
9. Your Data Rights
Subject to applicable law, you have the following rights with respect to your personal data held by shell96:
- Right of Access: You may request a copy of the personal data shell96 holds about you.
- Right to Rectification: You may request that inaccurate or incomplete personal data be corrected.
- Right to Erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain records.
- Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances.
- Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact shell96 at [email protected]. We will respond to all verifiable requests within thirty (30) calendar days.
10. Children's Privacy
21+ The shell96 Platform is strictly intended for adults aged 21 years and above. shell96 does not knowingly collect personal data from persons under the age of 21. If you believe that a person under 21 has provided personal data to shell96, please contact us immediately at [email protected] and we will take appropriate steps to delete such data promptly.
11. Third-Party Links
The shell96 Platform may contain references to third-party payment providers and game studios. This Policy applies solely to the shell96 Platform and does not cover the data practices of any third party. shell96 is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party services you interact with.
12. Changes to This Policy
shell96 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players by email or by posting a prominent notice on the Platform prior to the change becoming effective. The date of the most recent revision will always be displayed at the top of this page. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way shell96 handles your personal data, please contact our data team:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 via the shell96 Platform
- Response time: We aim to respond to all data-related enquiries within two (2) business days.