a policy of Agoda, and not a policy of Rihga Royal Hotel Hiroshima.
That doesn't surprise me - I've worked with them from the other end, and Agoda give the impression of being somewhat disorganized, and they've always seemed like a databreach waiting to happen.