1Introduction
Shell77 operates the online gaming and sports betting platform at Shell77.cam. This Privacy Policy describes how Shell77 ("we", "us", "our") handles personal information relating to individual account holders, prospective players, and visitors ("you", "your") when you use Shell77, access Shell77.cam, contact our support team, or participate in Shell77 promotions.
This policy applies to all personal data processed in connection with the Shell77 platform, including data collected from players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations in Malaysia. It applies regardless of the device — desktop, mobile browser, or tablet — used to access Shell77.cam.
Shell77 may update this Privacy Policy to reflect changes in product features, processing practices, or applicable requirements. When material changes are made, an updated version will be published on Shell77.cam with a revised effective date. Continued use of Shell77 after a published update constitutes acceptance of the revised policy.
2Definitions
In this Privacy Policy, the following expressions carry the meanings set out below:
- Personal Data means any information that directly or indirectly identifies a specific living individual, including name, identification number, contact details, financial references, and device identifiers.
- Processing means any operation performed on personal data, including collection, storage, use, disclosure, alteration, and deletion.
- Data Subject means the individual whose personal data is processed — primarily Shell77 account holders and registered players.
- Controller means the entity that determines the purposes and means of processing personal data — in this context, Shell77 in its operational capacity.
- Processor means a third party engaged to process personal data on behalf of Shell77 under a written contractual obligation, such as a payment provider or KYC verification service.
- Sensitive Data means data revealing financial details, identity document content, or information relating to responsible gambling flags, which Shell77 treats with enhanced protection measures.
3Personal Data We Collect
Shell77 may collect the following categories of personal data depending on how you interact with the platform:
3.1 Account Registration Data
When you register a Shell77 account, we collect the information you provide, which may include your legal name, date of birth, residential address, email address, and mobile phone number. This data is required to create and administer your account.
3.2 Identity Verification (KYC) Data
To comply with age verification (21+), anti-money laundering, and responsible gambling obligations, Shell77 may request copies of your MyKad or other government-issued identification, a current photograph or selfie, proof of residential address, bank or e-wallet account ownership evidence, and source-of-funds information. KYC documents are handled with strict access controls and are not shared with third parties except as required for verification processing.
3.3 Financial and Transaction Data
Shell77 processes references to the payment methods you use — including e-wallets such as Touch 'n Go eWallet, Boost, and GrabPay; bank accounts with Maybank, CIMB, Public Bank, or Hong Leong Bank; DuitNow and FPX references; and cryptocurrency wallet addresses for BTC, ETH, USDT, or BNB transactions. Full card or banking credentials are not stored directly by Shell77 — they are processed by our regulated payment partners.
3.4 Gaming and Activity Data
Shell77 logs wagers, game results, sports betting selections, bonus usage, session durations, and deposit and withdrawal history. This data is used to administer the platform, detect fraud, apply responsible gambling tools, and resolve disputes.
3.5 Communications Data
When you contact Shell77 support — by live chat, email, or other means — we collect and retain the content of those communications together with timestamps and any information provided about the issue.
3.6 Technical and Device Data
Shell77 automatically collects certain technical information when you access Shell77.cam, including IP address, browser type and version, operating system, device identifiers, referring URL, session duration, and page interaction data. This information is used for platform security, performance analysis, and fraud detection.
4Lawful Bases and Purposes of Processing
Shell77 processes personal data only where a recognised lawful basis applies. The table below summarises the primary processing activities and their corresponding bases:
| Purpose |
Data Used |
Lawful Basis |
| Account creation and administration |
Registration data, contact details |
Contractual necessity |
| Age and identity verification (KYC) |
Identity documents, photographs |
Legal obligation; contractual necessity |
| Payment processing and reconciliation |
Payment references, transaction records |
Contractual necessity |
| Fraud prevention and security |
Device data, IP address, transaction patterns |
Legitimate interest; legal obligation |
| Responsible gambling monitoring |
Gaming activity, deposit history |
Legal obligation; legitimate interest |
| Customer support and dispute resolution |
Communications, transaction data |
Contractual necessity; legitimate interest |
| Platform analytics and improvement |
Technical data, aggregated activity |
Legitimate interest |
| Marketing communications (optional) |
Email, mobile number, preferences |
Consent |
Where Shell77 relies on legitimate interests, we balance our interests against your rights as a data subject. You may object to processing based on legitimate interests as described in Section 10.
5Cookies and Tracking Technologies
Shell77.cam uses cookies and similar session-level technologies to maintain your login state, apply preference settings, measure platform performance, and support security monitoring. A cookie is a small data file stored on your device by the browser.
5.1 Strictly Necessary Cookies
These are required for Shell77 to function correctly — for example, to keep your session active while you navigate between the lobby, sportsbook, and cashier. They cannot be disabled without preventing core functionality.
5.2 Performance and Analytics Cookies
Shell77 may use anonymised analytics data to understand which features are used most, detect errors, and measure page load performance. This data does not identify individual players and is used solely to improve Shell77.cam.
5.3 Managing Cookies
You may manage or delete cookies through your browser settings. Please note that disabling non-essential cookies does not prevent Shell77 from processing personal data that is provided directly through account registration, transactions, and support interactions.
6Sharing of Personal Data
Shell77 does not sell personal data to any third party. Personal data may be disclosed in the following circumstances:
6.1 Payment and Banking Processors
To process MYR deposits and withdrawals through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and partner banks including Maybank, CIMB, Public Bank, and Hong Leong Bank, Shell77 shares relevant transaction references with the relevant payment service provider. These parties process data under their own regulated obligations and contractual terms.
6.2 Identity Verification Partners
KYC documents and biometric or photographic verification data may be processed by regulated third-party identity verification services engaged to assist Shell77 in fulfilling its age, identity, and anti-money laundering compliance obligations.
6.3 Platform Operations and Security
Certain technical and hosting service providers process device data, logs, and analytics under written agreements with Shell77. These processors are contractually prohibited from using Shell77 player data for their own independent commercial purposes.
6.4 Legal and Regulatory Disclosure
Shell77 may disclose personal data to law enforcement, regulatory authorities, financial intelligence units, or courts where required or permitted by applicable law, or where disclosure is necessary to protect the safety, security, or rights of Shell77, its players, or third parties.
No Data Sales: Shell77 has never sold and does not intend to sell player personal data to data brokers, advertisers, or unrelated third parties. All sharing arrangements are strictly limited to the operational purposes described above.
7International Data Transfers
Shell77 operates across server infrastructure that may be located outside Malaysia. Where personal data is transferred to jurisdictions outside the country of collection, Shell77 ensures that appropriate contractual, technical, and organisational safeguards are in place to provide a substantially equivalent level of data protection to that available under Malaysian law.
Specifically, transfers to payment processors serving Malaysian players via DuitNow, FPX, and local bank integrations are conducted in accordance with the applicable financial services regulatory framework. Where third-party providers are involved, they are required under contract to implement security measures consistent with Shell77's standards.
8Data Retention
Shell77 retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to the following considerations:
- Active accounts: Personal, financial, and gaming data is retained for the duration of the account relationship.
- Closed accounts: Transaction records, KYC documents, and communications required for legal, audit, or regulatory compliance purposes are retained for a period consistent with applicable obligations, typically a minimum of five (5) years from account closure.
- Responsible gambling records: Self-exclusion requests and related responsible gambling flags may be retained beyond account closure to prevent re-registration during the applicable exclusion period.
- Marketing preferences: Opt-in and opt-out records are retained for accountability and to honour your stated preferences in future communications.
When personal data is no longer required and no legal retention basis applies, Shell77 will delete or anonymise it in a secure manner.
9Data Security
Shell77 implements layered technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure:
- All connections to Shell77.cam are encrypted using 256-bit TLS/SSL protocols.
- KYC documents and sensitive financial references are stored in access-controlled environments with audit logging.
- Internal access to personal data is restricted to staff with a demonstrated operational need, under role-based access control.
- Shell77 systems are subject to periodic security assessments, intrusion monitoring, and vulnerability management processes.
- Players are responsible for keeping their own Shell77 login credentials, verification codes, and device access secure. Shell77 support agents will never ask for your password.
Despite reasonable precautions, no system transmitting data over the internet is entirely immune from risk. If Shell77 becomes aware of a security incident materially affecting player data, Shell77 will take prompt remediation action and notify affected players as required.
10Your Rights as a Data Subject
Subject to applicable law and the requirements of Shell77's operational and legal obligations, you may have the following rights in relation to your personal data:
10.1 Right of Access
You may request confirmation of whether Shell77 holds personal data about you and, if so, receive a copy of the data held, the purposes for which it is processed, and the categories of recipients with whom it has been shared.
10.2 Right to Rectification
If personal data held by Shell77 is inaccurate or incomplete, you may request that it be corrected. You may also update certain account details directly through the Shell77 account settings where this feature is available.
10.3 Right to Erasure
You may request deletion of personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other lawful basis applies, or where processing is found to be unlawful. Deletion may not be possible where Shell77 is required to retain data under legal or regulatory obligations — in such cases, Shell77 will explain what data must be retained and why.
10.4 Right to Restrict Processing
You may request that Shell77 restrict certain processing while an accuracy dispute is resolved, pending an objection review, or where processing has been found unlawful but you prefer restriction over deletion.
10.5 Right to Object
You may object to processing based on legitimate interests, including profiling for marketing purposes. Where you object, Shell77 will cease the relevant processing unless compelling legitimate grounds exist that override your interests.
10.6 Right to Withdraw Consent
Where Shell77 processes data based on your consent — for example, for optional marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
10.7 How to Exercise Your Rights
To exercise any of these rights, contact Shell77 support through the live chat available on Shell77.cam, or by email (plain text): [email protected]. Shell77 may need to verify your identity before processing a data rights request. We will respond within a reasonable period, and no later than required by applicable law.
11Minors and Age Restriction
Shell77 is strictly for persons aged 21 and above. Shell77 does not knowingly collect personal data from individuals under 21 years of age. If Shell77 becomes aware that personal data has been provided by or collected in relation to a person under 21, the account and associated data will be closed and deleted promptly.
Parents and guardians who believe that a minor has created a Shell77 account or provided personal data to Shell77 should contact support immediately. Shell77 will investigate and take appropriate action without delay. For guidance on protecting minors from online gambling, please refer to the Responsible Gambling page.
12Third-Party Services
Shell77.cam may reference or rely on third-party services such as payment providers and identity verification platforms. These services operate under their own privacy policies and data handling practices. Shell77 is not responsible for the privacy practices of third-party operators, and this Privacy Policy does not extend to their services beyond the data-processing agreements Shell77 maintains with them.
Players are encouraged to review the privacy notices of payment providers they use — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank — to understand how those entities handle financial and personal data submitted through their own platforms.
13Changes to This Privacy Policy
Shell77 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players by a notice displayed on Shell77.cam or by direct communication to the contact details on file. The revised policy will be effective as of the date stated at the top of the document.
Where a change materially affects how Shell77 uses or shares your data in a way that requires new consent, Shell77 will seek that consent before the change applies to your personal data.
14Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how Shell77 handles personal data, please contact Shell77 support:
- Live chat: Available 24/7 on Shell77.cam, staffed by English-language agents on Malaysia Time (MYT, UTC+8).
- Email (plain text only): [email protected]
You may also review the FAQ for common questions relating to account management, payments, and responsible gambling. For matters specifically relating to the platform's Terms & Conditions or Responsible Gambling practices, please visit the relevant pages.
Response Commitment: Shell77 will acknowledge all data rights requests within a reasonable timeframe and provide a substantive response as promptly as practicable, consistent with the complexity of the request and any verification requirements.