Privacy Policy

YOYI PRIVACY POLICY

This Privacy Policy explains how YoYi Malaysia Sdn. Bhd. (Company No.: 202501049805 (1651213-U))(“YoYi”, “we”, “our” or “us”) collects, uses, discloses, stores and protects personal data in accordance with thePersonal Data Protection Act 2010 (PDPA) and other applicable laws.

This Privacy Policy applies to all users of YoYi’s websites, applications, systems, parcel locker services, PUDOservices and related platforms (collectively, the “Services”).

1. Personal Data We Collect

We may collect and process the following categories of personal data, depending on the nature of your interaction with YoYi:

1.1 Identification and Contact Information

• (i) Name or identifier
• (ii) Mobile phone number
• (iii) Email address
• (iv) User or account ID

1.2 Transaction and Service Data

• (i) Parcel or order reference numbers
• (ii) Locker ID, location and transaction timestamps
• (iii) Inbound and outbound parcel records
• (iv) Collection and delivery status information

1.3 Image Capture and Security Data

• (i) Images captured by parcel locker cameras during operation
• (ii) CCTV or visual records for security, verification and dispute handling purposes

1.4 Device and Technical Data

• (i) Device identifiers
• (ii) IP address
• (iii) Log records and system interaction data

1.5 Other Information

Any information voluntarily provided by you through our Services or communications with us. We may alsoobtain your Personal Data from third parties or other sources where it is lawfully permitted.

2. Purposes of Processing

We collect and process personal data for the following purposes:

• (i) to provide, operate and manage parcel locker, PUDO and related services;
• (ii) to verify identity and prevent unauthorised access or parcel miscollection;
• (iii) to ensure parcel security and system integrity;
• (iv) to prevent fraud, misuse and unlawful activities;
• (v) to manage customer support, enquiries, complaints and disputes;
• (vi) to maintain system logs, audit trails and service records;
• (vii) to comply with applicable laws, regulations and lawful requests by authorities.

YoYi does not use image capture or personal data for marketing, profiling purposes.

3. Image Capture and CCTV

Certain YoYi parcel lockers and locations are equipped with cameras for operational and security purposes.

• (i) Image capture may occur automatically during locker operation.
• (ii) Images are collected strictly for identity verification, security, fraud prevention and dispute resolution.
• (iii) Images are retained only for as long as reasonably necessary, unless required for investigation, legal orregulatory purposes.

Image data is not used for marketing.

4. Consent

By registering, accessing or using YoYi’s Services, including proceeding with parcel locker operations afterviewing the on-screen notice, you acknowledge that you have read and understood this Privacy Policy andconsent to the processing of your personal data as described herein.

Where consent is required, failure to provide consent may result in our inability to provide certain Services.

5. Disclosure of Personal Data

We do not sell personal data. We may disclose personal data only to:

• (i)our employees, contractors and service providers on a need-to-know basis;
• (ii)technology, system or operational partners supporting our Services;
• (iii)logistics partners, operators or platforms involved in the relevant service flow;
• (iv)government authorities, regulators or law enforcement agencies where required by law; and
• (v)other parties with your consent or where permitted by law.

All third parties are required to process personal data in accordance with applicable data protection laws.

6. Data Security

YoYi implements reasonable administrative, technical and physical safeguards to protect personal data againstloss, misuse, unauthorised access, disclosure, alteration or destruction.

7. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes set out in this Privacy Policy or asrequired by law.

Retention periods may vary depending on the nature of the data, operational needs, dispute resolution or legalrequirements.

8. Your Rights

Subject to applicable law, you may have the right to:

• (i)request access to your personal data;
• (ii)request correction or update of inaccurate data;
• (iii)withdraw consent (where applicable);
• (iv)request deletion of personal data, subject to legal and operational requirements.

Requests may be made by contacting us using the details below.

9. Third-Party Data

Where you provide personal data relating to other individuals (such as senders or recipients), you confirm thatyou have obtained the necessary consent or authority to disclose such data to YoYi.

10. Cross-Border Data Transfer

Your personal data may be transferred to, stored or processed outside Malaysia where necessary for serviceprovision or system operations. In such cases, YoYi will take reasonable steps to ensure that the transferred datais protected in accordance with applicable data protection laws.

11. Cookies and Similar Technologies

Our websites and applications may use cookies or similar technologies to enhance functionality, performanceand user experience. You may manage cookie preferences through your device or browser settings.

12. Changes to this Notice

YoYi may amend this Notice any time to reflect legal or business changes. The latest version will apply andreplace previous ones. Updates will be notified on our website and/or app. Users are responsible for reviewingchanges, and continued use of our services implies acceptance.

This Notice is provided in both English and Bahasa Malaysia. In case of any inconsistencies between these two,the English version shall prevail.

13. Contact Us

If you have any questions, requests or concerns regarding this Privacy Policy or the handling of your personaldata, please contact:

YoYi Malaysia Sdn. Bhd.
Email: hqnetwork@yoyistation.com.my
Address: 23rd Floor, Mercu 3, Jalan Bangsar, KL Eco City, 59200 Kuala Lumpur, Malaysia