Shellslot takes every user's privacy seriously. This policy clearly explains how we collect, use, protect, and manage your personal data as a player on our platform.
By registering or using the ShellSlot platform, you consent to the collection and processing of your personal data as described in this Privacy Policy. Please read carefully before proceeding.
The security of your personal data is our highest priority. Here are the six core privacy protection pillars we practise every day.
All data transmitted between your device and shellslot servers is protected with 256-bit SSL encryption. Sensitive information such as payment details and personal identification data is stored in fully encrypted format.
You have full control over your personal data. Through your account settings, you can update your information, manage communication preferences, and request data deletion at any time.
Shellslot does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data belongs to you and we do not use it for commercial gain outside the platform.
Your data is stored in data centres that comply with international security standards, protected by layered firewalls, intrusion detection systems, and 24/7 year-round monitoring.
Our identity verification (KYC) and anti-money laundering (AML) processes comply with strict standards. Data collected for these purposes is used solely for verification and legal compliance.
You have the right to access, correct, and request a copy of the personal data we hold about you at any time. Requests will be processed within 14 working days through official support channels.
This Privacy Policy ("Policy") is published by ShellSlot and applies to all users who access or use the ShellSlot platform via the official website, Android mobile app, iOS PWA version, or any digital channel operated by ShellSlot.
We believe privacy is more than a legal formality — it is a fundamental right of every individual. That is why shellslot has built a transparent and accountable data protection system, ensuring every piece of information you share with us is handled with full respect and integrity.
This Policy describes the types of data we collect, the purposes for collection, parties who may have access to your data, your rights as a data subject, and how to contact us if you have any questions or concerns regarding privacy.
This Privacy Policy should be read together with Terms and Conditions shellslot. Both documents together form the complete agreement between you and shellslot regarding your use of the platform and the management of your personal data.
Shellslot only collects data that is strictly necessary to provide a quality, secure service that meets regulatory requirements. The following are the main categories of data we collect:
| Data Category | Sample Information | Primary Purpose |
|---|---|---|
| Identity Information | Full name, date of birth, identity card number, passport number | KYC verification, legal compliance |
| Contact Information | Email address, phone number, residential address | Account communications, 2FA verification |
| Financial Information | Bank account number, e-wallet details, transaction history | Deposit and withdrawal processing |
| Support Documents | Copies of ID card, bank statements, proof of address | Full identity verification (KYC) |
When you use the ShellSlot platform, our systems automatically record certain technical information for security and service improvement purposes:
In certain circumstances, ShellSlot may receive your personal data from trusted third-party sources, including identity verification service providers, payment processing partners such as DuitNow, FPX, and e-wallet providers, as well as relevant regulatory bodies.
Shellslot uses your personal data on valid legal bases, including contract fulfilment, legal obligations, legitimate company interests, and your explicit consent. The following are the specific purposes:
Shellslot does not use your personal data for any purpose other than those stated above. Should we intend to use your data for a new purpose, we will notify you in advance and obtain the necessary consent.
Shellslot does not sell or share your personal data with third parties for marketing purposes. However, there are certain situations where we need to share your data with trusted third parties:
We work with trusted service provider partners who help us operate the platform, including payment processors (DuitNow, FPX, Touch 'n Go, Boost, GrabPay), gaming technology providers, third-party identity verification services, and cloud infrastructure providers. All these providers are bound by strict data protection agreements and are only permitted to use your data for specified purposes.
Shellslot may be required to disclose your personal data to authorities if mandated by applicable law, including requests from law enforcement agencies, court orders, or legitimate regulatory requirements. In all such cases, we will endeavour to notify you as promptly as the law permits.
In the event of a merger, acquisition, or sale of company assets, user data may be transferred as part of that business transaction. You will be notified in advance if this occurs and will have choices regarding your data.
Shellslot never shares your account information or financial details with any other individual, including family members, without your written consent. Be cautious of anyone claiming to access your account on behalf of shellslot.
Shellslot uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you and remember your preferences.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect platform functionality and your overall user experience. Essential cookies cannot be disabled as they are required for account security and core platform functions.
Shellslot continually invests in the latest security infrastructure to protect your personal data. The security measures we implement encompass multiple layers of protection:
While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. In the event of a data breach affecting your information, shellslot will notify you within 72 hours of the breach being identified.
Shellslot retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Retention periods vary by data type:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | Throughout the active account period | Continuous service provision |
| Financial transaction records | 7 years after account closure | AML/KYC legal requirements |
| Support communication logs | 3 years | Complaint resolution and auditing |
| Technical log data | 12 months | Security and troubleshooting |
| KYC Documents | 5 years after account closure | Legal compliance |
Once the retention period ends, your data will be securely deleted or permanently anonymized so it can no longer be linked to your identity.
Shellslot respects your rights regarding your personal data. The following are the key rights you hold:
Request a copy of all personal data we hold about you in a readable format.
Request correction of any inaccurate or incomplete data in our records.
Request deletion of your personal data, subject to our legal obligations.
Object to the processing of your data for direct marketing purposes at any time.
Receive your data in a structured format that can be used on other platforms.
Request restriction of your data processing under certain circumstances while an investigation is in progress.
To exercise any of the above rights, contact the shellslot support team via in-app live chat or email at [email protected]. Requests will be processed within 14 working days from the date of receipt.
Shellslot operates on global cloud infrastructure. This means your personal data may be stored or processed on servers located in countries other than Malaysia. However, we ensure that any such data transfers are carried out with adequate safeguards:
Even if your data is processed outside Malaysia, the protection we provide remains at the same high standard as stated in this Privacy Policy, regardless of the physical location of the servers.
Shellslot reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform improvements. Whenever the Privacy Policy is updated, the "Updated" date at the top of this page will be revised.
For significant amendments that affect how we use your personal data, shellslot will notify you via your registered email or in-app notification at least 14 days before the amendment takes effect. Continued use of the platform after the amendment effective date constitutes acceptance of the updated policy.
Shellslot has appointed a Data Protection Officer (DPO) responsible for ensuring privacy policy compliance across the organisation. If you have any questions, concerns, or complaints regarding the management of your personal data, please contact us through the following channels:
Data Protection Officer Email:
We aim to respond to all privacy-related enquiries within 5 business days.
You may also reach us via the 24/7 Live Chat available directly within the ShellSlot app. Our support team is ready to help you understand your privacy rights and answer any questions regarding this Privacy Policy.
The shellslot platform is built with privacy protection at its core. Over 500,000 Malaysian players have trusted us. Now it's your turn.