Foya88 Privacy Policy
At Foya88, we take the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect, how we use it, who we may share it with, and what rights you hold as a registered player on our platform.
Data Encryption at Rest & in Transit
All personal data stored in our systems is encrypted. Data transmitted between your device and Foya88 servers is protected using industry-standard TLS 1.3 encryption — the same standard used by major banks and financial institutions.
Minimal Data Collection
We collect only the personal information necessary to provide our services, verify your identity, and comply with applicable regulatory requirements. We do not collect data we have no clear use for, and we do not sell your information to third-party marketers.
Your Rights, Clearly Stated
You have the right to access, correct, export, or request deletion of your personal data held by Foya88, subject to applicable legal and regulatory obligations. We provide a clear process for exercising these rights via our support team.
No Unauthorised Third-Party Sharing
Your personal data is shared only with service providers who are contractually bound to protect it, and with regulatory or law enforcement bodies where we are legally required to do so. We do not sell or rent your data.
Transparent Cookie Use
We use essential and functional cookies to operate the platform correctly, and analytics cookies to understand how players navigate our site. We do not use third-party advertising cookies. Cookie preferences can be managed in your browser settings.
Defined Data Retention Periods
We retain personal data only for as long as necessary — either to provide our services or to comply with legal obligations such as anti-money laundering record-keeping requirements. Account data is securely deleted or anonymised when the retention period ends.
1. Introduction
Foya88 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at https://foya88.cam. This Privacy Policy describes how Foya88 collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Player", "User") who register an account, access the Platform, or interact with our services in any capacity.
This Policy applies to all personal data processed in connection with your use of Foya88, whether you are accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location. It covers data collected through the website, account registration process, customer support interactions, payment transactions, and any other touchpoint between you and Foya88.
By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.
Note for Malaysian Users: Foya88 handles your personal data with care and in accordance with its internal data governance standards. All registered players must be aged 21 or above. We take age verification and identity protection seriously as part of our commitment to responsible operation.
2. Definitions
The following terms carry the meanings assigned to them throughout this Privacy Policy:
- "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other data. Examples include your full name, email address, date of birth, payment account details, and device identifiers.
- "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, modification, deletion, or transfer, whether by automated means or manually.
- "Data Controller" — Foya88, which determines the purposes and means of processing your personal data.
- "Data Processor" — a third-party service provider that processes personal data on Foya88's behalf, subject to written data processing agreements and strict confidentiality obligations.
- "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
- "KYC Data" — identity verification documentation submitted by you during the Know Your Customer process, including copies of government-issued identification documents such as the Malaysian IC (MyKad).
- "Cookies" — small text files placed on your device by the Platform to facilitate functionality, remember preferences, and generate analytics data regarding platform usage.
- "Sensitive Data" — a subset of personal data that warrants heightened protection, including data relating to health, financial circumstances, or identity documents.
3. Data We Collect
Foya88 collects personal data through several channels: directly from you during registration and account use, automatically through the Platform's technical systems, and from third-party verification and payment providers where necessary. The categories of personal data we may collect include:
3.1 Registration & Identity Data
Your legal name as it appears on your identification document.
Used to verify you meet the 21+ age requirement.
Primary channel for account communications and notifications.
Used for OTP verification and account security.
Required for KYC compliance and fraud prevention.
Government-issued identification submitted during KYC.
3.2 Financial & Transaction Data
When you make deposits or withdrawal requests, we collect data relating to the payment method used. This may include your e-wallet account identifier (e.g., the mobile number linked to your Touch 'n Go eWallet, Boost, or GrabPay account), your bank account number and bank name (e.g., Maybank, CIMB, Public Bank, Hong Leong Bank) for FPX and direct bank transfer transactions, or your cryptocurrency wallet address for USDT TRC20 and Bitcoin transactions. We do not store full payment card numbers on our systems.
We also retain records of all deposit and withdrawal transactions, including amounts in MYR (Malaysian Ringgit), timestamps, transaction reference numbers, and payment statuses.
3.3 Technical & Usage Data
When you access the Platform, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, session timestamps, pages visited, game activity logs, and betting history. This data is used to ensure platform security, detect fraud, and improve the user experience.
3.4 Communications Data
If you contact our support team via live chat or email, we retain records of those communications, including the content of messages and the timestamps of interactions. This enables us to resolve ongoing issues and maintain a consistent service history.
4. How We Process Your Data
We process your personal data for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, mobile, date of birth | Contract |
| Identity and age verification (KYC) | IC / passport, address, date of birth | Legal Obligation |
| Processing deposits and withdrawals | Payment method details, transaction records | Contract |
| Fraud detection and platform security | IP address, device data, transaction patterns | Legitimate Interest |
| Customer support and dispute resolution | Communications data, account history | Contract |
| Responsible gambling monitoring | Play patterns, deposit frequency, session data | Legal Obligation |
| Anti-money laundering (AML) compliance | Transaction records, identity data | Legal Obligation |
| Platform analytics and improvement | Usage data, session logs, device data | Legitimate Interest |
| Promotional communications (opted-in players) | Email address, game preferences | Consent |
5. Legal Basis for Processing
Foya88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:
- Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to provide the gaming platform, manage your account, and process financial transactions in MYR via your chosen payment method.
- Legal Obligation: Processing that is required for compliance with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, responsible gambling mandates, and any applicable reporting obligations to regulatory or law enforcement authorities.
- Legitimate Interests: Processing that is necessary for Foya88's legitimate operational interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security monitoring, and general analytics to improve service quality.
- Consent: For processing activities where you have explicitly opted in — for example, receiving promotional emails or SMS notifications about bonuses, new games, or platform updates. You may withdraw this consent at any time by contacting support or updating your communication preferences in your account settings.
6. Data Sharing & Disclosure
Foya88 does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data in the following limited circumstances:
6.1 Service Providers (Data Processors)
We engage third-party service providers who process personal data on our behalf under written data processing agreements that impose strict confidentiality and security obligations. These include payment gateway operators (including those facilitating Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, and cryptocurrency transactions), identity verification providers, gaming software and content providers, cloud hosting and infrastructure providers, and customer support platform vendors.
6.2 Regulatory and Legal Disclosure
Foya88 may disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or other government authorities where required by law, by court order, or in response to a lawful investigation. Such disclosures are made only to the extent required and are handled with appropriate confidentiality measures.
6.3 Business Transfers
In the event that Foya88 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that may result from it.
Data Sale Prohibition: Foya88 does not sell personal data. Your information will never be provided to commercial third parties for advertising targeting, lead generation, or any purpose outside of those stated in this Policy.
7. Data Retention
Foya88 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required to satisfy applicable legal, regulatory, tax, or accounting obligations. The following general retention principles apply:
- Active Account Data: Retained for the duration of your account's active status, plus a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations.
- KYC Documentation: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in accordance with applicable anti-money laundering regulations.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by financial record-keeping obligations.
- Support Communications: Retained for up to two (2) years from the date of the interaction, unless the communication forms part of an ongoing dispute or legal matter, in which case retention continues until resolution.
- Technical and Usage Logs: Retained for a maximum of twelve (12) months, after which they are anonymised or deleted.
- Marketing Opt-In Data: Retained until you withdraw consent, after which it is removed from active marketing lists within 30 days.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with Foya88's data destruction procedures.
8. Cookies & Tracking Technologies
The Foya88 Platform uses cookies and similar tracking technologies to ensure the platform operates correctly, to remember your preferences, and to generate aggregated analytics about how players navigate and use the site. We do not use third-party advertising or behavioural tracking cookies.
The cookies we use fall into the following categories:
You may manage cookie preferences through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in or using core platform features. For more information on managing browser cookies, refer to your browser's help documentation.
9. Your Data Rights
As a registered player on the Foya88 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or email as detailed in the Contact section of this Policy.
Right of Access
Request a copy of the personal data Foya88 holds about you. We will respond within a reasonable timeframe, typically 30 days of receiving a verifiable request.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account. Some corrections may require KYC re-verification.
Right to Erasure
Request deletion of personal data where it is no longer necessary for the purposes it was collected, subject to overriding legal retention obligations (e.g., AML record-keeping).
Right to Restriction
Request that we restrict processing of your data in certain circumstances — for example, if you contest the accuracy of the data while we verify it.
Right to Portability
Request a copy of data you have provided to us in a structured, machine-readable format, where technically feasible.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.
Identity Verification Required: To protect against unauthorised data requests, Foya88 will require you to verify your identity before processing any data rights request. This is for your own protection and ensures your data is not disclosed or deleted at the request of a third party.
10. Data Security
Foya88 implements a layered security architecture designed to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures include:
- Transport Layer Security (TLS 1.3): All data in transit between your device and Foya88 servers is encrypted using current industry standards.
- Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted at rest using AES-256 or equivalent standards.
- Access Controls: Access to systems containing personal data is restricted on a need-to-know basis. All internal access is authenticated, logged, and subject to periodic review.
- Two-Factor Authentication: Players may enable 2FA on their accounts for an additional layer of login security. Internal system access by Foya88 staff is protected by mandatory multi-factor authentication.
- Intrusion Detection: Our infrastructure is monitored continuously for unusual patterns, potential attacks, and unauthorised access attempts.
- Third-Party Security Audits: Foya88 engages external security professionals to conduct periodic assessments of our data protection infrastructure.
Despite these measures, no internet-connected system can guarantee absolute security. If you have reason to believe your Foya88 account has been compromised, please contact our support team immediately via the live chat feature within your account dashboard.
11. Minors & Age Policy
Foya88 is strictly an adult platform. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. The minimum age of participation on the Foya88 Platform is 21 years, and this requirement is enforced through our registration process and mandatory KYC verification procedures.
If we become aware that personal data has been collected from a person below the age of 21 — whether through an error in the registration process or any other means — we will take immediate steps to suspend the relevant account, delete the associated personal data, and return any deposited funds to the verified payment source.
If you are a parent or guardian and believe that a minor in your care has registered on the Foya88 Platform, please contact our support team immediately. We will act promptly to investigate and resolve the matter.
12. Third-Party Services & Links
The Foya88 Platform integrates with third-party service providers for payment processing, game content delivery, identity verification, and platform infrastructure. While Foya88 takes steps to ensure that all third-party data processors operate under appropriate data protection agreements, we are not responsible for the privacy practices of third parties whose own websites or services you may access independently.
Third-party payment processors — including those facilitating Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, and cryptocurrency transactions — operate under their own privacy policies and terms of service. When you interact with these providers to complete a transaction, your data is also subject to those providers' policies. We encourage you to review the privacy documentation of any third-party service you engage with in connection with your Foya88 account.
Foya88's website does not contain links to third-party external websites. Any reference to payment providers, financial institutions, or gaming content providers within this Policy or on the Platform is informational in nature.
13. Cross-Border Data Transfers
In the course of providing our services, personal data processed by Foya88 may be transferred to and stored on servers located outside Malaysia. Such transfers may occur in connection with cloud infrastructure hosting, payment processing, or the delivery of game content from licensed international providers.
Where personal data is transferred internationally, Foya88 takes appropriate contractual and technical steps to ensure that the receiving party provides an adequate level of data protection, consistent with the standards described in this Policy. This may include the use of standard contractual clauses, data processing agreements, or other transfer mechanisms recognised under applicable data protection frameworks.
By using the Foya88 Platform, you acknowledge and consent to the potential transfer of your personal data outside Malaysia under the safeguards described in this section.
14. Changes to This Privacy Policy
Foya88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly.
Where changes are significant — for example, a change in how we share your data with third parties or a new category of data collection — we may provide additional notice via email to your registered address or via an in-platform notification. For less material amendments, the updated Policy will be published on this page without separate notification.
Your continued use of the Platform after the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to remain informed of how your personal data is being handled.
15. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or the way Foya88 handles your personal data, please contact us through the following channels:
- Live Chat Support: Available 24 hours a day, 7 days a week, directly within your Foya88 account dashboard. This is the fastest way to reach us for any data-related query.
- Email: [email protected] — for formal written requests, including data access, rectification, erasure, or portability requests. Please include your registered account email address and a description of your request. We aim to respond within 30 days of a verifiable request.
- Banking Support Hours: For payment-related data queries, our specialist banking team is available Monday through Sunday, 09:00–23:00 MYT.
Data access and erasure requests require identity verification before they can be processed. This is a security measure designed to protect your data and will not affect the outcome of your request where it is valid.
For further information about our Terms of Service, please visit our Terms & Conditions page. For information on responsible gambling tools and resources, please visit our Responsible Gambling page.
Questions About Your Privacy at Foya88?
Our support team is available 24/7 to address any data privacy concerns, process access requests, or help you manage your communication preferences.
For registered players aged 21 and above only. Play responsibly.