Shellslot | Privacy Policy

Your privacy is not merely a legal obligation to us — it is the foundation of the trust we build with every shellslot member. As an online gaming platform operating in the Malaysian market, we comply with the Personal Data Protection Act 2010 (PDPA) and international data protection standards. This Privacy Policy details how your personal data is collected, stored, used, and protected throughout your membership with shellslot.

1 Introduction & Scope of This Policy

This Privacy Policy applies to all users who access the shellslot platform via the official website, Android and iOS mobile apps, and any other digital channels operated by shellslot. By using our services, you agree that your personal data will be processed in accordance with the terms set out in this document.

We use the term "personal data" to refer to any information that can be used to identify you, directly or indirectly — including your name, email address, phone number, financial information, and platform usage data. We do not sell your personal data to any third party for marketing purposes without your explicit consent.

2 Types of Information We Collect

Shellslot collects your personal data through several channels — directly from you during registration, automatically through your use of the platform, and in certain cases from trusted third parties for identity verification purposes.

We only collect data that is strictly necessary for the stated purposes. We do not collect information that is irrelevant or excessive relative to our platform's operational needs.

3 How We Use Your Information

The personal data we collect is used solely for legitimate and specific purposes. We will not process your data for any other purpose without notifying you in advance or obtaining your consent.

• Account Management: Create, verify, and manage your account including KYC processes and age verification.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
• Legal Compliance: Fulfil compliance obligations including anti-money laundering (AML) and regulatory reporting requirements.
• Platform Security: Detect and prevent fraud, account misuse, and suspicious activity.
• Service Improvement: Analyse usage patterns to improve user experience and platform performance.
• Communications: Send important account-related notices, promotions (where you have consented), and platform updates.
• Customer Support: Resolve enquiries, complaints, and technical issues more effectively using your interaction records.

4 Data Sharing & Disclosure

Shellslot does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may share your data with the following parties on a limited and controlled basis:

• Payment Service Providers: To process deposits and withdrawals, required transaction information is shared with approved payment gateway providers that comply with PCI DSS standards.
• KYC Service Providers: During the identity verification process, submitted documents may be processed by certified third-party verification partners.
• Regulatory Authorities: We are required to disclose certain information to relevant authorities when mandated by law, including law enforcement agencies.
• Technology Providers: Cloud infrastructure and technology providers that help us operate the platform are bound by strict confidentiality agreements.

5 Security & Data Protection

We invest seriously in security infrastructure to ensure your personal data remains protected at all times. shellslot's security systems are built on the latest technologies commonly used by financial institutions and internationally recognised digital platforms.

• All data transmitted between your device and shellslot's servers is protected using 256-bit SSL/TLS encryption.
• Account passwords are stored in hashed form using strong cryptographic algorithms — we cannot read your password ourselves.
• Two-factor authentication (2FA) is available for all accounts to add an extra layer of protection.
• Our server infrastructure is monitored 24/7 by a dedicated cybersecurity team.
• Security audits and penetration testing are conducted regularly by independent third parties.
• Access to members' personal data is restricted to staff who genuinely require it for operational purposes.

While we take all reasonable measures, no system can guarantee absolute security. We encourage you to take precautions on your end as well, such as using a strong password and not sharing your login credentials.

6 Cookies & Tracking Technologies

Shellslot uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure the security of your session. Cookies are small text files stored on your device when you visit our website.

You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect certain features of the ShellSlot platform.

7 Data Retention & Deletion

Shellslot retains your personal data for as long as your account is active and as long as it is needed to fulfil the purposes stated in this policy. After an account is closed or has been inactive for a specified period, your data will be handled in accordance with the following retention policy:

• Financial transaction data is retained for a minimum of 7 years to meet legal and audit requirements.
• Customer support communication records are retained for 3 years after the last interaction.
• Technical data and activity logs are retained for 12 months for security and troubleshooting purposes.
• KYC document copies are retained in accordance with applicable legal requirements, typically no less than 5 years.

Once the required retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8 Your Rights Over Your Personal Data

As a shellslot member and a Malaysian citizen or resident, you have certain rights regarding your personal data under the Personal Data Protection Act 2010. We are committed to respecting and facilitating the exercise of these rights.

9 Changes to This Privacy Policy

Shellslot reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Whenever significant changes are made, we will notify you via an in-platform notice or your registered email at least 14 days before the changes take effect.

The date of the latest update is always displayed at the top of this page. We encourage you to review this page periodically so you remain informed about how we protect your information. Continued use of the shellslot platform after changes take effect constitutes your acceptance of the latest version of this Privacy Policy.

10 Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your personal data rights, the shellslot Data Protection team is here to help. We are committed to providing clear and timely responses to all privacy-related enquiries.

• Privacy email: [email protected]
• General support email: [email protected]
• Live Chat: Available on the platform, 24 hours a day, 7 days a week
• Target response time for privacy enquiries: within 3 working days

We encourage you to contact us directly before filing a complaint with a regulatory authority, as most issues can be resolved quickly through our support channels.