Traveloka Privacy Notice
Last updated: May 28, 2025
You should be able to make informed decisions about your personal data. This Privacy Notice explains how Traveloka Services Pte. Ltd. (with its registered address in Singapore) and its group of companies that operate using the commercial brand name Traveloka (‘Traveloka’, ‘us’, ‘we’, or ‘our’) may collect, use, share and otherwise manage or control the processing of personal data that belongs to individuals (‘you’, ‘your’ and ‘yourself’) in connection with Traveloka websites, mobile applications, communications channels or other online and offline means.
Traveloka enables you to order, acquire, purchase, buy, pay, rent, provide, reserve, combine or consummate various travel and travel related products and services offered by us or third parties (collectively our ‘Products and Services’). These third parties include the provider of accommodation (e.g. hotel, motel, apartment, bed & breakfast, landlord), attractions (e.g. theme parks, museums, sightseeing tours), transportation suppliers (e.g. air travel, car rentals, cruises, buses, trains, airport transfers), tour operators, travel insurances and any other travel or related products or services as from time to time available for booking on our platform (collectively our ‘Travel Suppliers’). For a comprehensive understanding of the Products and Services we offer, including their specific features, functionalities and permitted uses, please refer to Traveloka Terms and Conditions of Use. In case of any discrepancies regarding our Products and Services, the definitions and provisions outlined in the Terms and Conditions shall take precedence.
Â
This Privacy Notice will regularly be reviewed and when necessary, updated to reflect any changes in the way we manage your personal data or due to changes in applicable laws. We expect you to visit the Privacy Notice page regularly, review it and familiarize yourself with how we process your personal data.
This Privacy Notice applies to all users of Traveloka who are individuals including anyone who makes booking with us without registering as Traveloka users, without login, anyone who visits our websites and/or mobile apps, (legal) representatives or contact person acting on behalf of our users or corporate customers and anyone involved in other transactions with us such as individuals of our vendors, suppliers, and/or business partners.
If you are reading this Privacy Notice on behalf of a corporate or business enterprise which maintains a contractual relationship with Traveloka, this Privacy Notice is intended to be addressed to the individual officers (e.g. authorised signatories/person in charge) of the corporate or business enterprise and ‘you’, ‘your’ and ‘yourself’ shall be construed accordingly to mean the relevant individuals.
We may obtain your personal data in the following ways:
When we say ‘personal data’, we mean  information, data or opinion we know about you or from which you are reasonably identifiable, whether true (or not) or recorded in material form (or not). This includes a piece of information or in combination with other information that directly or indirectly tells something about you. We process personal data to fulfill our contractual obligations with you in delivering our Products and Services, in particular:
Personal data you give to us.
Category of personal data
|
Types of personal data captured |
Identification data |
At a minimum, you are asked for your name and email address or phone number for the account creation. However, depending on the Products and Services, we may also ask for your date and place of birth, nationality or the names of the people travelling with you. In some cases, we will request you to provide us with a government-issued document(s) such as national identity card, passport number or driving license to facilitate a booking process with our Travel Supplier, process your refund or insurance claims and booking cancellations. Such data may also be requested as part of our know-your-customer process, which could be required by the  prevailing applicable laws or it is stipulated in Our Terms & Conditions of Use, to prevent fraudulent conduct or behavior that contravenes international sanctions and to comply with regulations including laws and regulations on money laundering, terrorism financing and tax fraud.
|
Transaction data |
Your booking ID and details of your bookings (such as hotel name, hotel location, and length of stay, activity packages) including the booking records and your insurance plan, such as policy holder and beneficiary details, coverage information, policy number and claims-related information.
|
Payment processing information |
Including bank account number and/or electronic payment instrument data such as card number, expiry date, billing address and other related transaction details.
|
User-generated content |
When you submit content on Traveloka Explore or other relevant features in Traveloka apps such as photos, videos or other user-generated materials such as reviews, we may collect your profile information (name, username or display name), your interaction data (engagement metrics, likes, replies or reports related to your content, timestamp and device information) when content is submitted.
|
Other information |
When you fill in a form, add information to your profile including profile picture, respond to surveys, participate in promotions, correspondence between you and us when it is sent to a dedicated mailbox or via other communication channels or social media, and your feedback or review about your experiences. This saved data can be used to help you plan and manage future travel or activity bookings.
|
When you share personal data about others, e.g. people who are travelling with you, you are responsible to ensure that such person or people is made aware of and has given his/her consent for sharing their personal data with Traveloka, and that they can understand how Traveloka uses their personal data as described in this Privacy Notice.
Moreover, if you are applying for a job with us or are a Traveloka existing employee, we process the following:
Additional personal details, contact details and identifiers/demographics |
In addition to the personal details listed above, Traveloka may collect additional personal details for recruitment/employment purposes, such as national identification number, social security number, insurance data, marital status, domestic partners, dependents and emergency contact data.
|
Education data and professional or employment-related data |
We may collect data about your education and professional or employment-related data such as your employment history.
|
Sensitive data for recruitment purposes |
We may collect certain types of sensitive data when permitted by law or with your consent, such as health/medical data (including disability status), trade union membership, religion, race or ethnicity and data on criminal convictions and offences. We collect this data for specific purposes such as health/medical data in order to provide benefits; background checks and diversity-related personal data (such as race and ethnicity) in order to comply with legal obligations and internal code of conduct on anti-discrimination.
|
Talent management data |
Data necessary to complete a background check, details on performance decisions and outcomes, performance feedback and warnings, e-learning or training programs and data used to populate biographies.
|
Sensitive Personal Data. Some of the personal data identified above, such as your government issued-ID card, financial data and health data may be categorized as sensitive or special category of data under certain applicable laws and regulations. Please be aware that this personal data may be required for certain bookings or to proceed with your job applications, and we may not be able to complete such bookings and/or recruitment process without this information.
Children’s Data. Our Products and Services are not directed or intended for use by a child who does not have a legal capacity to consent or does not have the maturity to understand what is being proposed by our Products and Services and of this Privacy Notice. We only collect personal data about children if you provide us with information about your own children or any child under your care. If you become aware that your child or any child under your care has provided us with information/personal data without your consent, please contact us using the Contact Details section below.
Personal data we collect from your devices.
Whenever you visit our websites or mobile apps, we collect certain data to provide you with a better experience of using our platform or to maintain security measures. Such data may include:
Personal data we receive from third parties or other sources.
We generally collect personal data on a voluntary basis directly from you, except for certain data that we collect from third parties or other (publicly) available sources, such as:
  Â
Processing means every activity that can be carried out in connection with personal data, such as collecting, recording, storing, adjusting, organizing, using, disclosing, transferring or deleting it in accordance with applicable laws and regulations. Generally, we only use your personal data based on your request as per our platform Terms and Conditions of Use that you have accepted and agreed to be bound for, including but not limited to, the purposes as outlined below.
You may choose not to provide some of the personal data as described in Section 2 above. However, many of our Products and Services require some personal data to operate, including sensitive personal data, to carry out the purposes necessary for fulfilling our legal and/or contractual obligations with you, as outlined below. Otherwise you may not be able to use such Products and Services.
Performing our contract obligations with you
Compliance with our legal obligations
We use your personal data to comply with a range of legal obligations and regulatory requirements that oblige us to perform or provide:
Our legitimate interest
We process your personal data for a range of purposes that are in our interests to uphold our contractual commitments as described below. When relying on legitimate interest, we ensure that processing remains proportionate and that your interests and fundamental rights are respected.
To achieve this purpose, we may combine personal data we collect from you during different visits to our platform or visits on different devices even when you are not logged in.
In most cases, our AI and ML solutions operate without processing personal data. Where these technologies are used, they primarily function in a way that analyzes general patterns, automates repetitive tasks and provides insights to enhance efficiency. For example, AI and ML may be used for the following purposes:
Where AI interacts with personal data in limited cases, we aim to ensure that the processing adheres to data minimization principles and that appropriate controls such as anonymization or pseudonymization are in place. Additionally, AI does not make fully automated decisions without human validation.
To respect your choice if we request your consent
Consistent with the above purposes and as permitted by applicable laws, we may communicate with you via electronic messages including email, text message or mobile push notification to:
We allow you to manage and review your notification preferences at any time through the Notification Settings page in your account. Here, you can toggle notification items on or off based on your preferences or you may opt out of receiving marketing materials by following the unsubscribe link or instructions set out in our marketing materials. Please note that changes to your preferences may take up to seven (7) calendar days to take full effect. This includes a five-day grace period in case you change your mind, followed by two days for processing. During this time, you may still receive communications that were already scheduled.
There are situations in which we need to provide your personal data to other parties involved in the provision of our services. This could include data transfers or disclosures within Traveloka group and to third parties with each instance of such sharing being conducted based on a valid legal ground, as outlined in Section 3 (Why Do We Process Your Personal Data).
Within Traveloka group
We are committed to your privacy, and we have adopted data protection and privacy principles through our Internal Data Privacy Policy and are binding on all Traveloka entities throughout the jurisdictions where we operate. We may share your personal data within our group to ensure that we are able to comply with our legal obligations such as:
With third parties
We may also share your Personal Data with the following third parties:
The personal data we collect may be stored on a server located outside your local jurisdiction.  Because it is in your interest or is necessary to conclude or perform the contract we have with you, including between our group entities and third parties as specified in Section 4 (Sharing of Your Personal Data), your personal data may also be transferred or be accessible across jurisdictions where we or our Travel Suppliers operate. We will take appropriate contractual, organizational and technical (such as encryption) measures to ensure that your personal data remains sufficiently protected.
Based on the provisions of relevant laws and regulations, your personal data rights may vary per jurisdiction. If you have questions about which rights apply to you, please get in touch with us using the email address mentioned in Section 10. In general, you may have the following rights:
Please note that all requests will undergo prior screening and verification. To confirm your identity and authority to make a request, we may ask you to provide supporting data or documentation. Once verified, we will assess your request and decide whether it is justified. In any case, we will process your request within the timeframes prescribed by relevant laws.
For any requests relating to this Privacy Notice, to exercise any of your rights or have a complaint, please contact us using the Contact Details specified in Section 10 below.
If you are not satisfied with our response to your complaint, you also have the right to complain to your local data protection authority.
We will retain your personal data, including Sensitive Personal Data, for as long as necessary in light of the purpose(s) for which it was obtained and further processed and consistent with applicable laws to exercise our legal rights where retention is advisable, protect our or your interests such as to address issues or defend claims that may arise, and to comply with our legal or regulatory obligations where there is a legal, tax, reporting, or auditing obligation to which we are subject, such as anti-money laundering requirements that requires us to keep records of your transactions for a certain period of time before we may delete them.
When we no longer need to use your information, we will remove it from our systems and records where feasible, and/or deactivate it or take other reasonable steps to properly anonymize it so that you can no longer be identified from it.
Please note information you have shared with other users such as reviews or contents posted may continue to be publicly visible on the Traveloka platform, even after your account is canceled.
We ensure that efforts were made to protect your personal data by doing the following:
To help us continue to protect your personal data, you should always contact us if you suspect that your personal data may have been compromised.
You can link your Traveloka account with certain third-party services and parts of the Traveloka platform may contain links to other websites owned by third parties. We do not own or have any control over such other websites. When you interact with these third parties, we are not responsible for the data handling practices of such other third-parties and advise you to read the privacy notice of each website you visit that collects any of your personal data.
Please also review Traveloka Terms and Conditions of Use for more details on using our platform. This Privacy Notice forms an integral part of our Terms and Conditions.
If you have any questions or complaints regarding this Privacy Notice or if you would like to exercise your rights, please send an email to our Data Protection Officer (DPO) team at privacy@traveloka.com with attention to Traveloka Group Data Protection Office. Your inquiry will be directed to the appropriate team based on your country of residence or the services you use.
Where required by local data protection laws, we have appointed designated Data Protection Officers (DPOs) or local representatives in Singapore, Indonesia, South Korea, Malaysia, Thailand, Vietnam, the Philippines, and Japan. If applicable, the relevant contact details will be provided to you upon request.
Singapore
Please note that we may collect, use, and disclose your National Registration Identity Card (NRIC) number or Foreign Identification Number (FIN) or other forms of identification (whichever the case may be) for websites or mobile applications related purposes to the extent permissible by law to fulfill our obligations and to prevent, detect, and investigate fraudulent activity within our platform.
Korea
To enhance the efficiency and speed of our services to local residents, we have entered into personal information processing agreements with our outsourced processors. Accordingly, during the provision of services, these outsourced processors may have access to your personal information.
With your personal information safety prioritization, we have established outsourcing agreements with our processors that cover the following obligations: (a) compliance with applicable personal information protection laws and regulations; (b) prohibition on the use of personal information for purposes other than those for which it was provided; and (c) prompt destruction of personal information upon completion of processing, along with other compliance obligations.
Thailand
Failure to process the necessary personal data may prevent us from fulfilling our contractual obligations, which could lead to certain inconveniences and restrict your access to some of our services. Additionally, the absence of your personal data may hinder our ability to carry out any legal obligations that both parties are required to adhere to.
If we request a copy of your Thai national identification card to verify your identity for legal obligations or business transactions, we may inadvertently receive sensitive personal data from this document, such as your religious beliefs and blood type. However, we do not intend to use this sensitive personal data for identity verification purposes. Therefore, we kindly ask that you redact any sensitive personal data, including your religious beliefs and blood type, before submitting a copy of your Thai national identification card.
This Privacy Notice is subject to translation into multiple languages. In case of any discrepancies between the English version of this Privacy Notice and its translations in other languages, the English version will take precedence.
Please check this Privacy Notice translated to your preferred language:
Â
© Traveloka