Delete your account

Close your Bolehlah account

Version 3 · effective 14 October 2026

When you ask us to delete your Bolehlah Member account, we close it: your sign-in ends and your information no longer appears in your Bolehlah account. Closing it does not delete your records — we keep them, as set out below. This page sets out how to ask, what closing your account ends, and what we keep.

How to ask

1In the app: open the Bolehlah Member app, go to Profile → Settings → About → “Delete account”, and confirm. Because you ask from inside your signed-in account, that is the verification — no email round-trip is needed.
2On the web: sign in to your Bolehlah member account, open Settings → Account → “Close your account”, choose “Ask to close my account”, tick the acknowledgement and press “Request account closure”. As in the app, asking from inside your signed-in account is the verification.
3No access to the app or the website? Email hello@bolehlah.ai from the email address registered on your Bolehlah account, with the subject line “Account deletion request”. We reply to check the request really comes from the account holder and to tell you how we can proceed. No account is closed on the strength of an email alone — please do not send your IC number by email.
4Your request is recorded as soon as you send it. From then on B stops chatting with you in the Bolehlah app, on the web and in any chat linked to your account on Bolehlah's own Telegram bot, and no new loan application can be started from your account. Closing the account is not automatic: our data-protection team carries it out by hand, as set out below — and in the cases under “What if I have a loan or a workspace?” it is held rather than carried out. When your account is closed, we send one email saying so to the email address on your account, if it has one.

What closing your account ends

Your sign-in: your login is closed and every signed-in session is ended. Your password, authenticator secret and recovery codes stop working.
Your sign-in links and devices: Google, Apple and Facebook sign-in links, passkeys, approval devices, linked devices and push-notification tokens are ended. We keep a record of which ones you had.
The codes we sent to verify your email or phone that you have not used yet.
Your links to a koperasi's chat channels (its Telegram bot, web chat and email) end, so those channels no longer recognise you, and an open web conversation with a koperasi's staff is closed. The messages already exchanged are kept (see below).
Apple Wallet: we stop updating your pass and remove its notification token. A pass already on your phone stays there until you remove it.

What we keep

Closing your account does not delete the records below. We keep them, and this page does not promise a date for deleting any of them.

Legal and koperasi records — what you agreed to and signed (consent records and signatures), the audit trail of actions taken on your account, and your Bolehlah Points, reward history and referral records. If a koperasi lists you as its member, its own record of you also stays with that koperasi under its own obligations: your membership details and its own corrections, the statements it issued to you (which can still be checked by scanning their code), and the messages you exchanged with it over its chat channels. To have a koperasi erase its own record, ask the koperasi directly.
Your identity and profile — your name, phone number, email address and IC number, the profile details you saved, and your conversations with B. They are kept so that if you come back with the same IC and prove it is you, you reconnect to your record.
Your documents and verification results — your uploaded documents (such as IC scans, which show your IC number, and payslips) and our records of them; what our document reader extracted from them (such as your IC number, employer, income and deductions); your identity-check (eKYC) records; the checks run on your account (for example ANGKASA screening); and the credit summary our AI prepared from your details.
Research — from the moment you ask to close your account, your records are kept out of our research unless you agreed to research use.
WhatsApp messages — messages you sent to Bolehlah's WhatsApp number are stored with your phone number, not with your account, so closing your account does not reach them. They are kept.

These records are not deleted when your account is closed.

Removing some data without closing your account

In the Bolehlah Member app, go to Profile → Settings. Under Privacy you can switch off optional consents, and under Security → Linked devices you can remove a linked device. For anything else, email hello@bolehlah.ai and tell us what you want removed.

What if I have a loan or a workspace?

If you have ever had a loan or made a payment through Bolehlah, or your login also runs a koperasi workspace or works for Bolehlah, we record your request and B stops chatting with you in the Bolehlah app, on the web and in any chat linked to your account on Bolehlah's own Telegram bot, but we do not close your account: those records carry legal and other duties that we are still working through, so your request stays open. If you have a loan, nothing about it changes — you still owe the lender of record, and you can still pay them directly.