Privacy Policy — Voxy88

This Privacy Policy ("Policy") is issued by Voxy88 ("Voxy88", "Platform", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with your use of the Voxy88 online sports betting, live casino, and gaming platform accessible at https://voxy88.click (the "Platform") and any associated services, communications, or interactions between you and Voxy88.

Voxy88 serves members throughout Malaysia, including users located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, Bangsar, and other cities and towns across the country. We are committed to handling the personal data of our Malaysian members with the care, security, and transparency that applicable privacy standards require.

This Policy should be read in conjunction with our Terms and Conditions and our Responsible Gambling Policy. By registering an account or using our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably be used to identify you as a natural person, including your name, email address, phone number, date of birth, payment account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, restriction, erasure, or destruction.
• "Data Controller" — Voxy88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of Voxy88 under a data processing agreement, for example a payment service provider or cloud infrastructure provider.
• "Member" / "User" — any individual who has registered an account on the Platform or who accesses the Platform without registering.
• "KYC" — Know Your Customer identity verification, comprising identity documentation and address confirmation required before processing withdrawal requests.
• "Cookies" — small text files placed on your device by the Platform to enable certain technical functions, session management, and analytics.
• "Sensitive Personal Data" — a subset of Personal Data warranting heightened protection, including financial information, government-issued identification numbers, and biometric data.

Voxy88 collects the following categories of personal data from members:

Voxy88 collects Personal Data through the following mechanisms:

Direct Submission

Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or updating your account profile. This includes all form fields, document uploads, and live chat or email communications initiated by you.

Automated Technical Collection

When you access the Platform, our servers automatically collect technical data including your IP address, device characteristics, browser type, operating system, referring URL, and session activity. This data is collected using standard web server logs, session tokens, and first-party cookies.

Payment Service Providers

When you conduct a transaction via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or a Malaysian bank transfer (Maybank, CIMB, Public Bank, RHB, Hong Leong), our payment processor shares with us the minimum transaction data necessary to credit or debit your account and to fulfil AML reporting obligations. We receive transaction references, amounts, timestamps, and account identifiers — not underlying card or banking credentials.

Third-Party Verification Services

For KYC and identity verification purposes, we may use a third-party identity verification service to authenticate your submitted identity documents. Such services process your documents under a data processing agreement with Voxy88 and are prohibited from using your data for any purpose other than verification.

Voxy88 processes your Personal Data for the following clearly defined purposes:

• Account Management: Creating, maintaining, and administering your member account, including authentication, account recovery, and profile management.
• Transaction Processing: Processing deposits, withdrawals, and refunds in MYR and cryptocurrency; maintaining accurate financial records; reconciling transactions with payment service providers.
• Identity Verification (KYC): Verifying your identity and age (21+) as required by our operating licence and anti-money laundering obligations. KYC is a legal requirement, not a discretionary process.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited activities. Technical data, including IP addresses and login patterns, is processed for this purpose.
• Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulatory requirements, including record retention and mandatory reporting obligations.
• Responsible Gambling: Monitoring usage patterns for indicators of problem gambling behaviour; enforcing deposit limits, self-exclusion orders, and cooling-off periods; and providing targeted responsible gambling communications to at-risk members.
• Customer Support: Responding to enquiries, resolving disputes, and processing formal complaints submitted via live chat, email, or other support channels.
• Platform Improvement: Analysing aggregated usage data to improve the performance, reliability, and user experience of the Platform.
• Marketing Communications (where consented): Sending promotional offers, bonus notifications, and product updates to members who have opted in to marketing communications. You may withdraw consent at any time via your Account settings.

Voxy88 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — operating your account, processing deposits and withdrawals, and providing access to Platform services.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML regulations, gaming licence conditions, tax reporting obligations, and court orders.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and service improvement, where such interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. Consent is freely given and may be withdrawn at any time without affecting the lawfulness of prior processing.

Voxy88 does not sell, rent, or trade your Personal Data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the specified purpose:

Payment Service Providers

We share transaction data with licensed payment processors including DuitNow operators, FPX-participating banks (Maybank, CIMB, Public Bank, RHB, Hong Leong), Touch 'n Go, Boost, GrabPay, and cryptocurrency network service providers, solely for the purpose of executing your deposit or withdrawal instruction.

Identity Verification Partners

For KYC compliance, we share identity document images and related data with our third-party identity verification provider, operating under a binding data processing agreement. Verification partners are contractually prohibited from using your data for any purpose beyond identity authentication.

Regulatory & Law Enforcement Authorities

Voxy88 will disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are required to do so by applicable law, valid legal process, or a binding regulatory order. We will notify affected members of such disclosures to the extent permitted by law.

Cloud & Infrastructure Providers

Platform data is hosted on secure cloud infrastructure operated by our technology partners. These providers act as data processors under binding agreements and have no independent right to access or use your Personal Data.

Business Transfers

In the event of a merger, acquisition, or sale of substantially all of Voxy88's assets, member Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. Members will be notified of any such transfer with reasonable advance notice.

As a member of Voxy88, you hold the following rights with respect to your Personal Data. These rights are exercisable by contacting our support team via live chat or email. We will respond to all valid data rights requests within thirty (30) calendar days of receipt and verification of your identity.

• Right of Access: You may request a copy of all Personal Data held about you by Voxy88, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. For account profile details, many corrections can be made directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected. Note that certain data must be retained for the legally mandated periods described in Clause 10, which supersedes erasure requests for that data.
• Right to Restriction: You may request that we restrict processing of your Personal Data to storage only while a dispute or correction request is being resolved.
• Right to Data Portability: You may request a machine-readable export of the Personal Data you have provided to Voxy88, in a structured, commonly used format.
• Right to Object: You may object to processing based on legitimate interests at any time, including processing for direct marketing. Upon receipt of a valid marketing objection, we will cease all marketing communications within 48 hours.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications, non-essential cookies), you may withdraw consent at any time via your Account settings, without affecting the lawfulness of prior processing.

The Voxy88 Platform uses cookies and similar tracking technologies to enable core functionality, maintain your session security, and understand how members use the Platform.

Essential Cookies

Required for the Platform to function. These include session authentication tokens (so you stay logged in), security cookies (to detect session hijacking), and load-balancing cookies. Essential cookies cannot be disabled without impairing Platform functionality. No consent is required for essential cookies.

Analytical Cookies

Used to understand aggregate usage patterns across the Platform — which pages are most visited, where users encounter errors, and how navigation flows work. Analytical data is processed in aggregated, anonymised form. You may opt out of analytical cookies via your browser settings or our cookie preference centre.

Preference Cookies

Store your Platform preferences, such as selected language, display settings, and notification preferences, so that they persist across sessions. These cookies are set based on your explicit configuration choices within your Account settings.

You can manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from accessing core Platform features; however, certain preference and personalisation functions may be unavailable.

Voxy88 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account Data (active accounts): Retained for the duration of the account's activity and for a minimum of five (5) years following account closure, as required by AML and gaming regulatory retention obligations.
• Transaction Records: Retained for a minimum of seven (7) years following the transaction date, in accordance with financial record-keeping requirements applicable to licensed gaming operators.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the business relationship, as required by applicable AML regulations.
• Support Communications: Retained for a period of three (3) years from the date of the communication, or longer if the subject matter is the subject of an active or reasonably anticipated legal dispute.
• Marketing Preferences: Retained until you opt out or request deletion. Opt-out records are retained indefinitely to prevent inadvertent re-subscription.
• Technical / Log Data: Retained for a rolling period of twelve (12) months, after which it is purged from active systems unless retained for fraud investigation purposes.

Upon expiry of the applicable retention period, Personal Data is either securely deleted from all Voxy88 systems or anonymised such that it can no longer be linked to any identifiable individual.

The Voxy88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data belonging to individuals under the age of 21.

If Voxy88 becomes aware, through KYC verification or any other means, that Personal Data has been submitted by or on behalf of an individual under 21 years of age, the associated account will be immediately suspended, all pending transactions will be reversed, and the relevant Personal Data will be securely deleted in accordance with our data erasure procedures.

Voxy88 implements a layered security framework designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3): All data in transit between your device and Voxy88 servers is encrypted using TLS 1.3 with 256-bit AES cipher suites.
• Data-at-Rest Encryption: Sensitive Personal Data stored on our servers is encrypted using AES-256 encryption. Database access is restricted to authorised personnel only, with all access events logged and audited.
• Two-Factor Authentication (2FA): Available to all members for account login. We strongly recommend enabling 2FA via your Account security settings.
• Regular Penetration Testing: Voxy88 engages independent security professionals to conduct regular penetration testing and vulnerability assessments of our infrastructure.
• Access Control: Employee access to Personal Data is granted on a strict need-to-know basis, with role-based access controls, multi-factor authentication, and activity logging in place for all internal systems.
• Fraud Monitoring: Automated real-time monitoring detects anomalous login behaviour, unusual transaction patterns, and other indicators of account compromise or fraudulent activity.

Notwithstanding the above, no security system is entirely impenetrable. In the event of a security incident affecting your Personal Data, Voxy88 will notify you via your registered email address as soon as practicable, including details of the incident and recommended protective actions.

Voxy88 operates globally and may transfer your Personal Data to servers or service providers located outside of Malaysia in the course of providing our services. Where such transfers occur, Voxy88 ensures that appropriate safeguards are in place to protect your Personal Data to a standard at least equivalent to that required under applicable privacy laws.

Safeguards for international data transfers include contractual data protection clauses incorporated into agreements with all third-party Data Processors, requiring them to implement security measures consistent with internationally recognised privacy standards. Where required by applicable law, we will obtain your consent before transferring Sensitive Personal Data internationally.

Voxy88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Material changes — those that significantly affect your rights or the way we process your data — will be communicated to registered members via their registered email address, with reasonable advance notice prior to the change taking effect.

The current version of this Policy, including the Effective Date shown at the top of the page, is always accessible at voxy88.click/privacy-policy. We recommend reviewing this page periodically. Your continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the Voxy88 Privacy team through the following channels:

• Live Chat: Available 24/7 on-platform in English, Bahasa Melayu, and Mandarin. Select "Privacy / Data Request" as the enquiry type. Average response time: 3–5 minutes.
• Email (plain text — not a clickable link): [email protected] — use subject line "Privacy Policy Query" or "Data Rights Request — [Your Member ID]" for formal requests.

We acknowledge all privacy-related queries within 72 hours and commit to providing a substantive response within 30 calendar days for formal data rights requests. For requests involving large volumes of data or complex processing activities, we may extend this period by a further 30 days, with notice provided before the initial deadline expires.