Bookmytiket.com Privacy Policy

Last updated: 05/10/2025

Summary of how we collect, use and/or disclose your personal data

• Bookmytiket.com  (also referred to as, “Bookmytiket.com”, “we”, “us”) collects, uses and/or discloses your personal data as a data controller for certain purposes including to provide you with our services and allow you to make hotel, flight or train reservations. We may also collect, use and/or disclose your personal data for purposes such as to communicate with you about our services, analytics, and the operation and management of our services, etc. More information is set out in sections 2 and 3.

• Personal data is shared with others including other affiliates and related corporations within our Group and third-party vendors. In some instances, personal data is transferred outside your country. More information is set out in sections 3 and 4.

• Depending on your location, you have certain data protection rights. Please see the information set out in section 5.

• If you choose to use biometric authentication (such as fingerprint or Face ID) for payment transactions, verification is conducted entirely on your device. Bookmytiket.com does not collect, process, or store biometric data but may receive confirmation of successful authentication. More information is available in the below table.

Table of contents

• What does this Privacy Notice cover?
• Personal data we may collect about you, how do we use and/or disclose the personal data, and what are the legal bases for the processing?
• How we share your personal data?
• Where we transfer your personal data?
• Your choices and rights
• How long we retain your personal data?
• Information security and protection
• Updates to this Privacy Notice
• Contact us

1. What does this Privacy Notice cover?

This privacy policy (“Privacy Notice”) describes how Bookmytiket.com will collect, use and/or disclose your personal data when you interact with us and any Bookmytiket.com websites (including any affiliated sites), mobile apps, and other services operated by us (hereafter collectively referred to as the “Services”) and when you purchase services from us.

It also describes your data protection rights, including the right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in section 5 below.

2. Personal data we may collect about you, how do we use and/or disclose the personal data, and what are the legal bases for the processing?

Bookmytiket.com collects, uses and/or discloses the information you provide to us directly to provide you with the services you request. For example, you may provide us your mobile number, email, or other information when you register a Bookmytiket.com account. When booking flight or train tickets, or using our car rental service, you may provide passenger names, ID document numbers and the contact person’s name, mobile number, email and other information. When booking hotels and tickets for tourist attractions, you may provide the travellers’ names, contact person’s name, mobile number, and email, etc. When paying for travel products, you may provide your bank card number, the mobile number previously provided to the bank, or your credit card details.

To enhance payment convenience, if your device supports biometric authentication (e.g., fingerprint or Face ID), you may choose to enable this feature for transactions. This verification is processed entirely on your device, and Bookmytiket.com does not collect, process, or store your biometric data. We only receive confirmation of successful authentication to authorize transactions. You can disable biometric authentication at any time through your account settings. The processing of biometric verification results is based on user consent.

To customize the services we provide you, we may also collect, use and/or disclose information about your travel plans and preferences which includes your meal requirements, departure date, check-in and check-out times, seat choice, ticket choice, insurance choice, and your selection of other services (such as car rental, attraction tickets, and travel guides, etc.) provided by Bookmytiket.com.

If you need to get in touch with our customer support team or reach out to us through other means (such as through social media) we will collect, use and/or disclose information from you there too, such as your name and contact information. For quality, training and dispute resolution purposes, we may record phone conversations when you call us, when you answer our calls or when you have a conversation with our partner providers via our platform.

You may also participate in referral programs or prize promotions, the details of which may be found on the event page. Doing so will also mean providing us with your name and contact information. In addition to this, you can provide us with feedback or ask for help with using Bookmytiket.com travel services.

You may be traveling with other guests or making a booking on someone else’s behalf, in which case you will provide the relevant personal data to Bookmytiket.com. However, we would like to remind you that it is your responsibility to ensure that the person or people whose personal data you have provided are aware that you’ve done so, and have agreed to your sharing of their personal data with Bookmytiket.com for the purposes set out in this Privacy Notice.

AI systems are implemented to assist certain data processing activities as describe in the table below. Please note that your personal data will not be used for AI training, or transferred to any third parties for providing AI service.

The table below describes the personal data we collect, use and/or disclose, the purposes for which we collect, use and/or disclose the personal data, and the legal bases we rely on to process the personal data.

To use our Services and/or enter into a contract with us, the collection, use and/or disclosure of certain relevant personal data is mandatory. If you withdraw your consent for the collection, use and/or disclosure of such relevant personal data, we will not be able to provide some or all of our Services and/or enter into a contract with you, and we may need to terminate the existing relationship and/or contract you have with us. We have highlighted above the personal data for which the collection, use and/or disclosure is optional.

Information We Receive Through Other Sources

Sometimes, we receive information about you from third parties. In particular, we may also obtain your information from affiliates and related corporations and business partners.

For example, when you make a booking or reservation through the website or mobile app of one of our affiliates and related corporations or business partners, your booking or reservation information with them might be forwarded to us so that we can process your booking and ensure its success. Also, we allow you to log into Bookmytiket.com with your social media account or Apple ID, and with your consent (where you grant authorization to such third party), your personal data (e.g., openid, name, nickname, email address, profile photo, where applicable) will be shared with us through that third party.

Automatically Collected Information

Bookmytiket.com automatically collects user-related information during service use for security, service provision, claim response, dispute resolution, and restriction of legal and terms violations. The specific details are as follows.

• Log information that the system may automatically collect when you use our Services via cookies, web beacons, or other channels (including those placed by our third-party partners).
• Device information or software information such as IP address, software version, and device identifier of the mobile device you use, Web Browser or mobile device information used to access our Services.
• Information on the web pages visited, keywords searched, pages accessed through our apps, and other information searched or provided during the use of our Services.
• Information included in content shared or posted through our Services, such as photos, comments, dates, and times.
• User preference information such as language, region, and currency.
• Where you have given your consent: location information collected when you use location-based services after setting the location function on your device. This includes location information collected via GPS or Wi-Fi, address information included in Account Information you provided to us, the location information and current/past location you shared with us. If you do not want your location information to be collected, you can disable the location function setting.

For more details on how we use cookies, please refer to our Cookie Statement.

3. How we share your personal data?

We may share your personal data with the following categories of recipients:

4. Where do we transfer your personal data?

Personal data that we collect from you may be transferred to and stored at a destination outside your country. Due to the global nature of our business, your personal data may be disclosed to our Travel Service Providers, third-party vendors, financial institutions and third-party payment processors, business partners, advertising partners, affiliates and related corporations within our group, government authorities, law enforcement, regulators and fraud prevention agencies, prospective buyers and their advisers, and Bookmytiket.com’s advisers outside of your country, in connection with the purposes described above. Where these locations do not provide an adequate level of data protection, we ensure appropriate safeguards are in place to protect your personal data in these countries.

5. Your choices and rights

Depending on your location, you have certain data protection rights in accordance with applicable data laws.

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you wish to exercise any of these rights, please contact us at the contact details set out below.

Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Please also note that we will not be able to provide some or all of our Services and/or enter into a contract with you in case you withdraw your consent.

You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message (e.g. clicking the unsubscribe link contained at the bottom of marketing emails), by adjusting the notification settings in your account profile on Bookmytiket.com websites or apps, or by contacting us using the details set out below.

We are committed to investigating and resolving complaints about our collection, use and/or disclosure of your personal data. To make a complaint, please clearly provide the following information to help us address the issue effectively:

• Ÿ   The specific data privacy complaint (please provide as much detail as possible including country, your understanding of the data privacy infringement, and redress requested)
• Ÿ   Your full name and how we can contact you
• Ÿ   Any previous correspondence on this specific data privacy issue

If you are not satisfied with our resolution of your complaint, you have the right to complain to the relevant data protection authority.

We aim to resolve all issues in a timely manner, or as mandated by applicable law, but if this is not possible because a more detailed investigation is required, we will keep in regular contact with you to ensure that you are kept informed of the resolution of your matter.

6. How long we retain your personal data?

Where Bookmytiket.com processes your personal data as allowed by law or with your consent, Bookmytiket.com will store your personal data i) only for as long as is required to fulfil the purposes mentioned previously or other business or legal purposes, ii) until you object to our use of your personal data (where Bookmytiket.com has a legitimate interest in using your personal data), or iii) until you withdraw your consent, whichever is applicable. However, if Bookmytiket.com is required to retain your personal data for business or legal purposes or to address legal claims, Bookmytiket.com will retain your personal data until there is no longer any business or legal purpose to do so or until the claims in question have been settled. In particular:

Where we process your personal data in relation to your account, we do this for as long as you are a user of Bookmytiket.com and as allowed by applicable laws after this. If you request data deletion when deleting your account, we will respond to your request in accordance with applicable laws.

Where we process personal data for marketing purposes or with your consent, we process the personal data until you ask us to stop and for a short period after this to allow us to implement your requests. We also keep a record of the fact that you have asked us not to send you direct marketing or not to process your personal data indefinitely so that we can respect your request in future.

Where we process your personal data for student verification or your health information for refund or change of reservation, we will automatically delete them on a rolling basis after the necessary period for the purposes above.

7. Information security and protection

Bookmytiket.com attaches great importance to information security and has set up a dedicated team for this. We strive to protect your personal data and have taken appropriate managerial, technological, and physical security measures.

In terms of the data life cycle, we have established security measures for all stages including data collection, storage, display, processing, use, and destruction. We take different control measures according to the level of information sensitivity, including but not limited to access control, SSL encryption transmission, and high-level encryption algorithms for encrypted storage, in order to mask the sensitive information to be displayed, etc. We have obtained ISO 27001, PCI DSS, and SOC2 Type 2 certifications. We rely on currently available technologies and take appropriate security measures to protect your personal data.

In the unlikely event of a data breach affecting your personal data, we will inform you in accordance with laws and regulations by email or other means.

8. Updates to this Privacy Notice

We reserve the right to update this Privacy Notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.

9. Contact us

Please contact us by email support@Bookmytiket.com.

Cookie Statement

What is a cookie?

Our websites and apps (“platforms”) use cookies that are essential for their operations. We also use cookies for various other purposes including analytics, functionality, and marketing.

A cookie is a small text file that we store on your computer or phone when you use our platforms. To learn more about cookies, please go to www.aboutcookies.org.

We may also use similar technologies such as Software Development Kits (SDKs). In this statement we refer to all such technologies as “cookies”.

You have the option to accept or decline cookies. While most web browsers are set to accept cookies by default, you can typically adjust your browser settings to refuse them if you wish. However, doing so might limit your ability to fully utilize the website’s features.

What type of cookies does Bookmytiket.com use?

We use the following types of cookies:

Essential cookies:

These are cookies that our platforms cannot operate without. They include, for example, cookies that enable you to log into our platforms, use a shopping cart, and pay for travel products. You can switch these cookies off in your browser settings, however you may then not be able to use our platforms.

Non-essential cookies:

• Ÿ   Analytical cookies

These cookies allow us to collect information on how you interact with our platforms. This helps us measure and improve the way our platforms work, for example by seeing how effective our offers and advertisements are and ensuring that you can easily navigate our platforms.

• Ÿ   Functionality cookies

These cookies remember you between visits to our platforms. This enables us to personalize your experience and remember your preferences, for example, your past searches and your language, region, and currency settings.

• Ÿ   Marketing cookies

We, together with our trusted third-party partners, use these cookies to record your visit to our platforms and your other online activities. This allows us to gather information on you to determine which travel products, advertisements, and offers we display to you both on our platforms and across the Internet. This helps us to provide a more personal advertising experience. To learn more about your options for personalized advertising, please go to www.youronlinechoices.eu. To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.

We use session and persistent cookies. Session cookies are deleted when you close your browser or our apps. Persistent cookies remain on your computer or phone and are activated the next time you visit our platforms. Cookies may be placed by us, or one of our trusted third-party partners.

2.   Personal data we may collect about you, how do we use and/or disclose the personal data, and what are the legal bases for the processing?

11. User experience survey and market research

The “Legal Basis” column shall be modified as follows:

Your consent where required by law.

In the event that we need to collect any additional personal data from you other than the personal data stated in this Privacy Notice, either via emails or calls for the purposes of collecting user experience and market research, we will seek your consent before collecting such personal data.

We also have a legitimate interest in understanding and improving our services based on your feedback.

5.   Your choices and rights

In addition to provision 5 of the Privacy Notice, data subjects residing in Malaysia have the following rights regarding your personal data:

You have the right to request access to your personal data that we hold about you, as well as the right to request the correction of any inaccurate or incomplete personal data.

9.   Contact us

Please contact us by email support@Bookmytiket.com.

10.   Conflict

In the event of any conflict or inconsistency between the English version of this Privacy Notice and any other translated versions, the English version will prevail.

2. Personal data we may collect about you, how do we use and/or disclose the personal data, and what are the legal bases for the processing?

In addition to the information provided in the Privacy Notice,

• Your Account Information may likewise be processed for account management purposes, for customer service purposes, for service improvement and customized service provision purposes with your consent where required by law.
• Your Reservation Information may likewise be processed for customer service purposes, for service improvement and customized service provision purposes with your consent where required by law.
• Your information may likewise be processed for fraud detection and prevention, payment verification, improving service security and reliability purposes where the processing necessary for the protection of our lawful rights and interests in court proceedings, or the establishment, exercise or defence of legal claims, or when provided to government or public authority, or with your consent where required by law.
• Your nationality, and education information (e.g. estimated graduation time, school name, ISIC International Student Card) may likewise be processed for student verification and benefit provision purposes with your consent where required by law.

5. Your choices and rights

In addition to the Privacy Notice, under the applicable Philippine’s Data Privacy Act, you have the following data subject rights:

• You have a right to be informed whether personal data shall be, are being, or have been processed, including the existence of automated decision-making and profiling.
• You have a right to be given access to specific kinds of information identified in the Data Privacy Act upon reasonable demand.
• You have the right to dispute the inaccuracy or error in your personal data and have us correct it immediately and accordingly, unless the request is vexatious or otherwise unreasonable.

2.   Personal data we may collect about you, how do we use and/or disclose the personal data, and what are the legal bases for the processing?

The table in the Privacy Notice describes the personal data we collect, use and/or disclose, the purposes for which we collect, use and/or disclose the personal data, and the legal bases we rely on to process the personal data. By accessing and/or utilising our Services and where required by applicable privacy laws and regulations, you hereby validly and expressly consent to the processing of your personal data in the manner described in this Privacy Notice.

14. Student verification and benefit provision

The “Detailed purpose and scenario description” column shall be modified as follows:

If you wish to verify your student status and enjoy related discounts, we will process relevant personal data, and some of such data is required by the suppliers/providers of the discounts. The ISIC International Student ID or similar certificate will be used solely to verify your student status.

If you are a student under 21 who wishes to use our service or book products available on our platform and wishes to verify your student status and enjoy related discounts, please ensure that you have obtained the consent of your parent or guardian in accordance with applicable laws.

The “Legal Basis” column shall be modified as follows:

We have a legitimate interest in managing our business and providing you with our Services.

Your consent and parent’s or guardian’s consent where required by law.

4.   Where do we transfer your personal data?

In addition to the information provided in the Privacy Notice,

In the event that there is no adequate level of data protection and appropriate safeguards to protect your personal data in those countries, we will request your consent before transferring your personal data to those countries.

5.   Your choices and rights

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you wish to exercise any of these rights, please contact us via email at the contact details set out below.

6.   How long we retain your personal data?

Where Bookmytiket.com processes your personal data as allowed by law or with your consent, Bookmytiket.com will store your personal data i) only for as long as is required to fulfil the purposes mentioned previously or other business or legal purposes, ii) until you object to our use of your personal data (where Bookmytiket.com has a legitimate interest in using your personal data), iii) until you withdraw your consent, and/or iv) until when Bookmytiket.com ( https://Bookmytiket.com/ ) realizes that your personal data was obtained and/or processed by Bookmytiket.com ( https://Bookmytiket.com/ ) for whatsoever reasons unlawfully, whichever is applicable.

8.   Updates to this Privacy Notice

We reserve the right to update this Privacy Notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data. In the event you object to any modifications to our Privacy Notice, you retain the right to withdraw your consent to and/or request the cessation of the processing of your personal data. However, in circumstances where personal data processing is required to comply with applicable laws and regulations, it shall remain unaffected by any such withdrawal or cessation request.

For the processing of personal data as regulated by the PDP Regulations (as defined below), which has legal effect (a) in the jurisdiction of the Republic of Indonesia (applicable to Indonesian citizen and foreigners residing in Indonesia); and/or (b) on a personal data subject who is an Indonesian citizen or former Indonesian citizens (specifically those whose personal data was collected during their tenure as Indonesian citizens) located outside the jurisdiction of the Republic of Indonesia, the following additional terms will apply:

Pursuant to Section 2 of the Privacy Notice, Bookmytiket.com, acting as personal data controller as regulated by the PDP Regulations (as defined below) and its users shall comply with all applicable local, state, federal, and foreign laws in using the Services, including, but not limited to:

o   Law No. 11 of 2008 on Electronic Information and Transactions, as amended;

o   Law No. 27 of 2022 on Personal Data Protection;

o   Government Regulation No. 71 of 2019 on Operations of Electronic Systems and Transactions;

o   Minister of Communications and Information Technology Regulation No. 4 of 2016 on Information Security Management System;

o   Minister of Communications and Information Technology Regulation No. 20 of 2016 on Personal Data Protection in Electronic Systems; and

o   Minister of Communications and Information Technology Regulation No. 5 of 2020 on Operations of Electronic Systems in The Private Sector;

all amendments thereto and other relevant laws and regulations, as applicable (collectively referred to as the “PDP Regulations”).

This Privacy Notice is made available in English and other languages. In the event of any inconsistency or difference in interpretation between the other language version and the English language version, you agree that the English version shall prevail, and the other language version shall be interpreted to conform with and be consistent with the relevant part of the English version. For avoidance of doubt, the existence of versions of this Privacy Notice is not to be construed by you as creating different rights and obligations or duplication or multiplication of your or our rights and obligations under this Privacy Notice.

If you are under 21, except for those above 19 and are legally married, you represent and warrant that you have the consent of your parent and/or legal guardian to enter into and be bound by this Privacy Notice, and use the Services mentioned in this Privacy Notice.