Official Document

Privacy Policy shuffle

We take every detail of the data you entrust to shuffle seriously. This page explains exactly how your information is collected, used, protected, and what your rights are as a user of our platform.

Updated: January 2026
01

Introduction and Scope of This Policy

Welcome to shuffle — an online casino platform operating under the domain shuffle.ml. This Privacy Policy is an official document that explains our practices for collecting, processing, storing, and protecting your personal information whenever you use our services.

By registering an account or continuing to browse the shuffle website, you are deemed to have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any provision herein, we encourage you to contact our support team before continuing to use the platform.

This Privacy Policy applies to all shuffle users, including website visitors, registered members, and shuffle mobile app users. It also covers all your interactions with our platform, including account registration, gaming activity, financial transactions, and communications with our support team.

shuffle's Commitment: We do not sell, rent, or trade your personal data to any third party for marketing purposes without your explicit consent. Your privacy is not our product — it is our responsibility.

02

Types of Personal Data We Collect

Shuffle collects various types of information depending on how you interact with our platform. This data collection is necessary to enable us to provide a secure, fair, and personalised service to every member.

Data You Provide Directly

  • Identity information: full name, date of birth, gender, identification card number or passport number.
  • Contact information: Email address, mobile phone number, and residential address.
  • Financial information: bank account number, e-wallet details, and transaction history.
  • Verification documents: copies of MyKad, passport, utility bill, or bank statement submitted during the KYC process.
  • Communication records: support chat history, emails, and feedback you have sent to shuffle.

Automatically Collected Data

  • Technical data: IP address, device type, operating system, browser version, and screen resolution.
  • Usage data: pages visited, games played, session duration, and navigation patterns.
  • Location data: general geographic location based on IP address for regional verification purposes.
  • Gaming data: wagering history, wins, losses, and bonus usage.
Data Category Data Examples Primary Purpose
Identity Name, IC, date of birth Account verification (KYC)
Financial Bank accounts, e-wallets Deposit & withdrawal processing
Technical IP address, device type Security & fraud prevention
Behaviour Game history, sessions Responsible gaming & personalisation
Communication Chat logs, email Customer support & audit records
03

How We Use Your Data

Every piece of information shuffle collects has a specific and legitimate purpose. We do not use your data beyond the scope stated here without first obtaining additional consent from you.

  • Identity verification and KYC: verifying that you meet the age requirement, confirming your identity, and complying with anti-money laundering (AML) legal requirements.
  • Account management: creating and maintaining your account, processing logins, and managing security settings.
  • Transaction processing: processing deposits, withdrawals, and bonus awards securely and accurately.
  • Personalise your experience: recommending relevant games, customising the interface, and sending promotional offers aligned with your interests.
  • Platform Security: detecting and preventing fraud, unauthorised access, and activities that violate the terms of service.
  • Responsible gaming: monitoring gaming patterns to identify signs of problem gambling and activating appropriate protection tools.
  • Service Communications: sending important notifications about your account, transactions, policy changes, and promotions.
  • Legal compliance: fulfilling reporting obligations to relevant authorities when required by law.

You may opt out of marketing communications from shuffle at any time via your account settings or by contacting our support team. Withdrawing marketing consent will not affect your account functionality.

04

Data Storage and Security Measures

The security of your personal information is shuffle's top priority. We implement multiple layers of technical and operational protection to ensure your data remains safe from unauthorized access, breaches, or misuse.

Technical Security Infrastructure

  • 256-bit SSL/TLS Encryption for all communications between your device and shuffle servers.
  • Secure password storage using the bcrypt hashing algorithm — shuffle staff cannot view your password in its original form.
  • Two-factor authentication (2FA) available to all accounts as an additional security layer.
  • Real-time monitoring to detect suspicious login attempts and cyberattacks.
  • Data backup performed regularly to data centres protected physically and cybersecurity-wise.
  • Internal access controls ensuring only authorised personnel can access sensitive user data, with every access logged for audit purposes.

Data Retention Period

Shuffle retains your personal data for as long as your account is active or as long as necessary to fulfil the stated purposes. Following account closure, certain data may be retained for a minimum period of 5 years to meet AML legal compliance requirements and applicable tax obligations. After that period, data will be securely deleted or anonymised.

Never Share Your Password: While we protect your data on the server side, account security also depends on your own actions. The shuffle team will never ask for your password through any communication channel.

05

Data Sharing With Third Parties

Shuffle does not sell or rent your personal data to any third party for commercial purposes. However, in the course of operating the platform, we may share necessary data with specific parties as follows:

  • Payment providers and financial gateways: to process deposits and withdrawals securely. These providers are subject to PCI DSS security standards and are not permitted to use your data for any other purpose.
  • Identity verification providers: third-party services that assist with KYC processing and automated document verification.
  • Regulatory authorities and law enforcement: when required by court order, official investigation, or statutory reporting obligations.
  • Technical service providers: including cloud, analytics, and cybersecurity services that help shuffle operate. All such providers are bound by strict confidentiality agreements.
  • Game providers: third-party game software companies may receive limited game data necessary for game operations, but will not receive your full identity information.

Cross-Border Transfers: Some of our service providers may operate outside Malaysia. In such cases, shuffle ensures that data transfers are conducted with equivalent protection through data transfer agreements that comply with international standards.

06

Cookies, Tracking Technologies, and Analytics

Shuffle uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the shuffle website.

Types of Cookies We Use

  • Essential Cookies: required for basic platform operations — login, session security, and language preferences. These cookies cannot be disabled without affecting core platform functionality.
  • Performance Cookies: collecting data on how users interact with the website to help us improve performance and navigation.
  • Functional Cookies: saving your preferences such as favourite game display and personal settings so you do not need to reconfigure them every time you log in.
  • Analytics Cookies: helping us understand aggregate usage patterns for the continuous improvement of the shuffle platform.

You can manage or delete cookies through your browser settings at any time. Please note, however, that disabling certain cookies may affect your experience on the shuffle platform.

07

Your Rights as a User

Shuffle recognises and respects your rights over your personal data. You may exercise the following rights at any time by contacting our privacy team:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct any inaccurate or incomplete information.

Right to Erasure

Request deletion of your data, subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes.

Right to Portability

Receive your data in a machine-readable format.

Right to Restriction

Request restriction of data processing in certain circumstances.

To exercise any of the above rights, please contact us at [email protected]. We will respond to your request within 30 days from the date of receipt. In complex cases, this period may be extended by up to 60 days with notification to you.

Some data deletion requests may not be fully fulfilled if the data in question is required to meet legal obligations, resolve ongoing disputes, or enforce our agreements with you. In such cases, we will inform you of the reason for the restriction.

08

Child Data Protection

Shuffle is an adult entertainment platform permitted only for users aged 18 years and above. We do not intentionally collect or process personal data from individuals under the age of 18.

Should shuffle discover that personal data has been collected from a person under the age of 18 without our knowledge, we will take immediate action to delete that information and close the relevant account. Parents or guardians with concerns about this are welcome to contact us directly at [email protected].

Absolute Prohibitions: Registration by minors is strictly prohibited. shuffle's age verification system is designed to detect and prevent access by children and teenagers. Any attempt to bypass this system constitutes a serious violation of our Terms and Conditions.

09

Changes to This Privacy Policy

Shuffle reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or improvements in how we protect user data.

Any significant changes to this Privacy Policy will be communicated to you via email to your registered address or through an in-platform notification on shuffle, at least 14 days before those changes take effect. This gives you sufficient time to review the changes and make an informed decision.

The date of the latest update is always displayed at the top of this page. Continued use of the shuffle platform after the effective date of a policy change is considered acceptance of the updated terms.

10

Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how shuffle handles your personal data, do not hesitate to reach out to us through the following channels:

  • Privacy Email: [email protected]
  • Live Chat: available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform
  • Response Time: we are committed to responding to every privacy inquiry within 5 business days

For official requests relating to data rights (access, deletion, correction), please submit a written request via email with the subject "Data Rights Request" along with your full name and account number to expedite processing.

Shuffle is committed to resolving every privacy inquiry transparently and professionally. If you are not satisfied with our response, you have the right to refer the matter to the relevant data protection authority in your jurisdiction.

shuffle's Six Pillars of Data Protection

Here is how shuffle keeps your information secure and your privacy respected at all times.

Military-Grade Encryption

All data transmitted between your device and shuffle's servers is protected with 256-bit SSL encryption — the same technology used by leading financial institutions worldwide.

Two-Factor Authentication

Enable 2FA on your shuffle account for an additional layer of security. Even if your password is compromised, hackers still cannot access your account without the verification code.

24/7 Fraud Monitoring

Shuffle's automated monitoring system operates around the clock to detect any suspicious activity on your account and take preventive action immediately.

Sensitive Data Segregation

Your financial information and identity documents are stored separately from your gaming data, with strict multi-layered access controls applied to each data category.

Full Legal Compliance

Shuffle complies with applicable data protection legal requirements, including AML and KYC requirements, ensuring your data is handled to the highest standards.

Full Control in Your Hands

You have full control over your personal data. Update your information, request data access, or close your account — all easily done through your account panel or by contacting our support.

Privacy Frequently Asked Questions

Answers to the most frequently asked questions by shuffle members regarding personal data protection.

Absolutely not. shuffle does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is only shared with service providers who assist in platform operations, and they are bound by strict confidentiality agreements.

You may request a copy of your personal data by emailing [email protected] with the subject line "Data Access Request". Include your full name and account number. We will process your request within 30 days and send a comprehensive data report to your registered email address.

Following account closure, shuffle retains certain data for a minimum period of 5 years to fulfil AML legal requirements and financial compliance obligations. After this period, all data will be securely deleted or fully anonymised so that it can no longer be associated with you.

KYC documents such as copies of your MyKad or passport are stored in an encrypted environment with strictly limited access. These documents are used solely for identity verification and legal compliance purposes, and are not shared with any party other than approved identity verification providers.

Yes, you may request data deletion. However, some data may need to be retained to fulfil legal obligations even after account closure. In such cases, we will inform you of the data that cannot be deleted and the reasons why, and will delete all other data that is legally permissible.

Your financial information is protected with 256-bit SSL encryption during transmission and stored in an isolated environment with multi-layered access controls. We work with payment providers that comply with PCI DSS security standards, and no shuffle staff member has full access to your complete financial details.
Safe & Trusted

Ready to Play With Peace of Mind?

Shuffle prioritises the security of your data just as much as your gaming enjoyment. Register today and enjoy a safe, fair, and responsible online casino experience.

Bahasa Melayu