If you've read the April 2026 article about the hackers breaking into Booking.com and stealing personal information, you should be concerned. Best practice is to immediately change your password after a breach, but Agoda does not offer such an option! I hope for your sake you do not use the same password on Agoda as other sites.

Why delete Agoda?

Well, my personal data has been leaked. Deleting the account will not resolve that, but I am deleting Agoda to simplify my life; I have too many (loyalty program) accounts. In other words, some loyalty programs are not succeeding in creating loyalty from me. You can read about some of my airline programs that I ended also:

Agoda was good about a decade ago. Today, I don't find it relevant or the best anymore in terms of pricing and loyalty incentives. You can read my reviews below to learn what is good or not good about Agoda. The short version is I moved over to Trip.com which is typically cheaper, more comprehensive in offerings, and better designed.

The Agoda profile user experience

While Agoda used to have a password change option - you may have seen YouTube videos of that - that is not the case today.

Absolute disaster. There is no option to change your password.

You can see from the screenshot below you have no options to change your email or password. Only your display name. How crazy is that.

There is also no option to view/edit credit card information that you may or may not have saved. Again, this is terrible for customers that may want to know what credit cards are at risk, even if Booking.com says credit card numbers were not breached.

Deleting my account

Agoda deserves none of my loyalty due to the bad security designs above.

The only saving grace for them is the existence of a Delete my account button at the bottom of the profile page.

After you click on the Delete my account button mentioned earlier, you see a second screen with another Delete my account button.

It's kind of annoying I have to click the same button twice, but I get they want to provide a warning. I am not thrilled it will take 120 days to delete though. My expectation is 30 days. After deleting 200 plus accounts online, most sites I've seen delete in 30 to 90 days. 120 days is definitely way out there.

So after clicking on the second Delete my account button, I am prompted to sign in and verify my account again with an OTP (One Time Password). It is good they are verifying it really is me for this sensitive operation.

And they check again in case you change your mind. But it seems like they have not checked this themselves .... look at Header Title in the screenshot below.