Privacy Policy Shell Slot – Malaysia Member Data Protection

1Introduction & Scope of This Privacy Policy

Shell Slot is committed to protecting the privacy of all members who use our platform. We understand that you trust us with sensitive personal information when you register and carry out financial transactions on Shell Slot. That trust is not something we take lightly.

This Privacy Policy applies to all personal information collected through the shellslot.asia website, the Shell Slot mobile app (where available), and all communications between you and the Shell Slot team via live chat, WhatsApp, email, or any other channel. It also applies to data collected when you use payment services such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX in the context of Shell Slot transactions.

This Policy does not apply to third-party websites or platforms that you may access via links from Shell Slot. We encourage you to read the privacy policies of those platforms separately, as Shell Slot is not responsible for their privacy practices.

2Types of Personal Data We Collect

Shell Slot only collects data necessary to provide members with a safe, fair, and efficient service. The data we collect falls into three main categories:

Shell Slot does not collect data unrelated to the provision of our services. We do not ask for information such as your religion, ethnicity, or political affiliation under any circumstances.

3Purpose of Personal Data Collection

Every piece of data collected by Shell Slot has a clear and lawful purpose. The following are the primary reasons we collect your personal information:

• Registration & Identity Verification: To create your Shell Slot account and verify that you meet the minimum age requirement of 18 years and all other eligibility criteria.
• Financial Transaction Processing: To process deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as to process withdrawals of your winnings to the same payment methods.
• KYC and AML Compliance: To meet Know Your Customer (KYC) and anti-money laundering (AML) requirements applicable in Malaysia. This may include requests for a copy of your MyKad or passport for withdrawals that exceed certain limits.
• Account Security: To detect and prevent unauthorised access, fraud, bonus abuse, or any suspicious activity on your account.
• Customer Support: To identify you when you contact Shell Slot's support team via live chat, WhatsApp, or email, and to resolve any issues you encounter more efficiently.
• Platform Improvements: To analyse how members use Shell Slot in aggregate (not individually) for the purposes of improving the user experience, adding in-demand games, and enhancing platform performance.
• Marketing Communications: To send you information about Shell Slot's latest bonuses, promotions, and offers — only if you have consented to receive such communications. You may unsubscribe at any time.
• Responsible Gaming: To monitor your gameplay patterns for responsible gaming purposes, and to contact you if the system detects signs of concerning behaviour.

4How Your Data Is Used at Shell Slot

Personal data collected by Shell Slot is used exclusively for the purposes stated in Section 3 above. We do not use your data to make automated decisions that could affect you without human review, except in cases of automated fraud detection which will subsequently be reviewed by our compliance team.

Your betting history on Shell Slot — including games played, wager amounts, and winning patterns — is used solely for service purposes such as resolving disputes, processing bonus claims, and supporting Responsible Gaming features. This data is never used to "manipulate" game outcomes in any way — all Shell Slot games use independently certified RNG and are not influenced by individual player profiles.

Payment information such as your digital wallet account number or FPX details is retained only in the form required to process withdrawals back to the same method. Shell Slot does not store full credit or debit card numbers in our systems.

5Data Sharing with Third Parties

Shell Slot does not sell, rent, or trade members' personal data to any third party for their own marketing or commercial purposes. This is an absolute commitment on our part.

There are, however, limited situations where we need to share your data with selected third parties — all of which are necessary for us to deliver our services to you:

• Payment Service Providers: Transaction information required to process your deposits and withdrawals is shared with service providers such as Touch 'n Go, GrabPay, or the banks supporting FPX. These providers maintain their own privacy and security policies, which are independent of Shell Slot.
• Game Provider: Providers such as Pragmatic Play, PG Soft, and Evolution Gaming may receive limited game session information to ensure continuity and game integrity. This does not include your detailed financial data.
• Statutory Authorities: Where required by Malaysian law or a valid court order, Shell Slot will disclose the requested information to the relevant statutory authorities. We will endeavour to notify you of any such disclosure unless prohibited by law.
• Technical Service Provider: Technical infrastructure providers — such as cloud services and security monitoring — may have access to data in a technical capacity. All such providers are bound by strict confidentiality agreements with Shell Slot.

In all of the data-sharing instances above, Shell Slot ensures that only the minimum necessary information is shared, and all recipients are bound by confidentiality obligations equivalent to or stricter than those in this Policy.

6Shell Slot Data Security Measures

Protecting member personal data is more than a legal obligation for Shell Slot — it is a moral responsibility we take seriously. The following are the key security measures we have put in place:

• 256-bit SSL Encryption: All communications between your browser or app and Shell Slot's servers are encrypted using TLS protocol with 256-bit keys. This ensures that transmitted data — including passwords, payment information, and personal data — cannot be read by unauthorized parties while in transit.
• Encrypted Password Storage: Your password is never stored in plain text. Shell Slot uses a strong hashing algorithm with a unique salt for each user, meaning that even in the event of a system breach, your password cannot be recovered.
• Two-Factor Authentication (2FA): Shell Slot uses OTP verification via SMS during registration and for sensitive actions such as withdrawals. This provides an additional layer of security beyond your password.
• 24-Hour Security Monitoring: Shell Slot's automated monitoring system operates around the clock to detect unusual activity, repeated failed login attempts, or suspicious transaction patterns.
• Internal Access Controls: Only Shell Slot staff with a legitimate business need may access member personal data. This access is audited on a regular basis, and all actions are recorded in tamper-proof logs.
• Secure Data Backup: Member data is regularly backed up to secure, separate locations to ensure service continuity in the event of an unforeseen incident.

While Shell Slot takes all reasonable steps to protect your data, no digital security system can be guaranteed 100% secure. We encourage members to use strong passwords, keep their login credentials private, and report any suspicious activity to our support team promptly.

7Cookies & Tracking Technologies

Shell Slot uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and keeping your account secure. These cookies cannot be disabled without affecting Shell Slot's primary functionality.
• Performance Cookies: Collects anonymous information about how members use the platform — most visited pages, time spent, and errors encountered. This information is used to improve Shell Slot.
• Functional Cookies: Remembering your preferences such as language, display settings, and game choices to provide a more personalised experience on your next visit.
• Marketing Cookies: Used only with your consent to display relevant Shell Slot offers and promotions. You may decline these cookies without affecting the core functionality of the platform.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of certain areas of the Shell Slot platform.

8Data Retention & Deletion

Shell Slot retains members' personal data only for as long as necessary for the purposes outlined in this policy, or as required under applicable Malaysian law.

• Active Account Data: Retained for as long as your Shell Slot account remains active. If you request account closure, your personal data will be deleted or anonymised within 30 days of closure, except for data that must be retained for legal purposes.
• Financial Transaction Records: Deposit history, withdrawals, and financial transaction records are retained for the minimum period required under Malaysia's anti-money laundering laws — typically seven (7) years from the transaction date.
• Communication Logs: Communication records between you and the Shell Slot support team are retained for two (2) years for reference and dispute resolution purposes.
• Technical Log Data: Technical access logs such as IP addresses and activity records are retained for 90 days for security and fraud detection purposes.
• Inactive Accounts: If your account has been inactive for 36 consecutive months and your account balance is zero, Shell Slot reserves the right to delete that account's data. You will be notified by email before any deletion takes place.

Once the retention period expires, Shell Slot will delete or anonymise your data in a manner that ensures it cannot be re-identified. This process is carried out on a regular basis and is fully documented.

9Your Rights as a Shell Slot Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by Shell Slot. Shell Slot fully respects and upholds these rights:

• Right of Access: You have the right to request a copy of the personal data Shell Slot holds about you. This request will be processed within 21 business days.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may also update most of your information directly through your Shell Slot account settings.
• Right to Erasure: Under certain circumstances, you have the right to request that Shell Slot delete your personal data. Such requests will be assessed against applicable legal obligations and legitimate operational requirements.
• Right to Object to Processing: You have the right to object to the processing of your data for direct marketing purposes. Processing for other purposes may be subject to broader legal considerations.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to the withdrawal.
• Right to Lodge a Complaint: If you believe Shell Slot has violated your privacy rights, you have the right to file a complaint directly with us or with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact the Shell Slot support team by email at support@shellslot.asia with the subject line "Privacy Rights Request" and the details of your request. We will acknowledge receipt within 3 business days and resolve the request within 21 business days.

10Children's Data & Special Protection

Shell Slot is an entertainment platform intended solely for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from any individual under the age of 18.

If Shell Slot discovers or suspects that an account has been registered by someone under 18 years of age, the account will be suspended immediately pending investigation. All data associated with the account will be deleted once underage status is confirmed, regardless of any balance or winnings in the account.

Parents and guardians who suspect their children have accessed Shell Slot without permission are encouraged to contact us immediately at support@shellslot.asia for immediate action.

11Links to Third-Party Websites

From time to time, the Shell Slot platform may contain links or references to third-party websites such as game provider sites, sports guides, or other informational resources. These links are provided for your convenience only and do not constitute an endorsement of the content or privacy practices of those websites.

Shell Slot has no control over the content, privacy policies, or security practices of third-party websites. Once you click a link and leave the Shell Slot platform, our Privacy Policy no longer applies. We strongly encourage you to read and understand the privacy policy of every website you visit.

12Privacy Policy Updates & How to Contact Us

Shell Slot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The "Updated" date at the top of this page indicates when the policy was last revised.

For material changes — that is, changes that significantly affect how your data is used — Shell Slot will provide advance notice via email to the address registered to your account, or through a prominent notification on the platform. You are encouraged to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Shell Slot handles your personal data, please contact us:

• Email: support@shellslot.asia – send an email with the subject line "Privacy Policy Enquiry"
• Live Chat: Available 24 hours a day, 7 days a week within the Shell Slot platform
• WhatsApp: Response within 5 minutes during operating hours

We will acknowledge receipt of your enquiry within 1 business day and provide a full response within 7 business days for privacy-related matters.