Last I heard, Nvidia Shield may have hardcoded DNS endpoints embedded via raw IP address. Your conventional PiHole setup won't work. You'll have to blackhole the ad DNS traffic entirely by blocking the Nvidia Shield's IP traffic to anywhere outside your network. Honestly, it's pretty sad the lengths we're having to go to for privacy, but... There it is.