At least in the EU, privacy laws require personally identifiable information (PII). An in-game toon is not that - although the player’s visible Steam account name may contain their actual name or email address, which do count as PII. But even in such cases, one might argue that the player has voluntarily decided to use their real name in the game, with all consequences. (That said, I think it wasn’t clearly stated that the game would show the player’s Steam account name in-game, which would make Funcom at least partially responsible for such violations of privacy.)

So, recording a toon who is not personally identifiable is not a violation of privacy, but if the player is identifiable, things get complicated, and would probably require a resolution by a data protection authority or a court of law.

Furthermore, if you record the voice of someone who can be identified, you’re giving tools for cybercriminals who can use those voice samples to impersonate the victim using AI-generated speech imitations. It’s already happening. So from that point of view - never publish anyone else’s voice without their express permission.