Agoda is a Singapore-based online travel agency app for accommodation, flight and activity bookings, operated as one of Booking Holdings Inc.'s (NASDAQ: BKNG) five primary consumer-facing brands alongside Booking.com, Priceline, KAYAK and OpenTable. Its privacy policy discloses collection of sensitive categories including precise geolocation, passport details and payment card data, and states it may share one-way hashed identifiers with advertising partners who combine them with other identifiers for ad-effectiveness analytics; a companion CCPA/state-privacy page self-declares that data is 'shared' (though not sold for financial compensation) with third parties for interest-based advertising, with an opt-out. The policy also discloses routine sharing of personal data with Booking Holdings Group affiliated companies for fraud detection and internal investigations. The Apple App Store privacy label independently confirms Identifiers data is used to track users across apps and websites owned by other companies. No Agoda-specific regulatory action or breach was found; Booking Holdings' FY2025 10-K describes a NIST-aligned cybersecurity/privacy program independently assessed by a third party every other year, with Board and Audit Committee oversight, but no published independent audit report.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
7 ON FILE
COLLECTION
Agoda's privacy policy states that sensitive CA Personal Data it collects and discloses includes passport details, payment card information, and precise geolocation information, each tied to a specific purpose (transactional/billing/service provision), alongside recorded support calls and inferences drawn from collected data described elsewhere in the same section.
Booking Holdings Inc.'s FY2025 Form 10-K names Agoda as one of the company's five primary consumer-facing brands, alongside Booking.com, Priceline, KAYAK and OpenTable, establishing the ownership chain from the NASDAQ-listed public parent.
Agoda's privacy policy states that it shares personal data with Booking Holdings Group affiliated companies to detect, prevent, and investigate fraudulent or other illegal activities and data breaches, and for internal audit/compliance investigations, in addition to analytics and marketing purposes.
Agoda's CCPA/state-privacy-rights page self-declares that it may 'share' personal information with third parties under the broad statutory definition covering interest-based advertising, explicitly noting it does not receive financial compensation for the information (distinguishing a 'share' from a compensated 'sale'), and offers an opt-out.
Booking Holdings Inc.'s FY2025 Form 10-K states that the company leverages NIST frameworks for cybersecurity and privacy, annually measures its program maturity against those frameworks, and engages a third party every other year to assess against them, with results discussed with the Board of Directors and the Cybersecurity Subcommittee of the Audit Committee; no Agoda-specific breach or regulator action was found in the sources reviewed.
Agoda's privacy policy states that it engages advertising partners for delivery of tailored content and advertising, sharing one-way hashed information about users that the partners may combine with other identifiers to facilitate advertising-effectiveness analytics.
The Agoda iOS App Store listing's App Privacy section (developer-declared) states that Identifiers data may be used to track the user across apps and websites owned by other companies.