A hotel, villa or beach club in Bali, Lombok or anywhere else in Indonesia that offers guest Wi-Fi is keeping personal data about people who are, legally, somebody else’s guests. The rules are specific and they are not the European ones. Set the property to Indonesia during setup and the platform follows them.
MOCI Regulation 20 of 2016 and Government Regulation 71 of 2019 require electronic system operators to keep connection records for five years. Most guest Wi-Fi platforms keep ninety days and do not say so. On an Indonesian property that is a gap, and the property, not the platform, is the one holding it.
The notice a guest sees before connecting has to be in Bahasa Indonesia. International guests still need English, so the page carries both and the guest chooses. The wording is yours; the requirement to show it is the law’s.
Getting online never depends on saying yes to marketing. The box is separate, never pre-ticked, one per channel. A guest who says no is online at the same speed as everyone else, and the record of who said yes, to what wording, and when, is kept.
This page describes how the product behaves. It is not legal advice, and your own counsel decides what your property must do.
A five-year retention pack for identifiable connection records, twenty times the ninety-day default, with clocks that agree with each other so a record carries the right time. The sign-in page in Bahasa Indonesia with English alongside. Marketing consent as its own tick, recorded with the exact wording the guest saw.
The data is held in a single hosting region serving every country today, with the cross-border safeguards in the processing agreement. If holding the data in Indonesia is a hard requirement for your property, that is a conversation to have before you sign up, not after. Where the data is →
None of this is a checkbox at the end. It is configuration, chosen once, and it is why the compliance page on this site is a table of countries rather than a paragraph about GDPR.
Retention · five years, identifiable connection records
Sign-in notice · Bahasa Indonesia, English alongside
Consent · separate, un-ticked, per channel, recorded
Erasure · personal data deleted, the records the law requires kept without identifying details
Export · a guest’s whole record, free on every plan
A resort with a beach club in Canggu has two kinds of guest on one network: residents who signed in with room number and surname, and day visitors who tapped Google to get online. Both are connection records. Both fall under the five-year rule. The day visitors are also the ones on the marketing list, so their consent record matters twice.
We support South East Asia from an office in Bali, and Indonesia is one of the two markets where most of our installations are. The retention pack exists because the first properties needed it, not because a regulation was read in a lawyer’s summary. Guest Wi-Fi for hotels and resorts → · For beach clubs →
Five years of connection records, under MOCI Regulation 20 of 2016 and Government Regulation 71 of 2019. That is twenty times the ninety days most guest Wi-Fi platforms keep by default, and it is not a setting a property should have to discover on its own. Set the property to Indonesia and the retention period follows.
The sign-in notice does. The page is shown in Bahasa Indonesia with English alongside for international guests, and a guest can switch. The wording of the notice is the property’s own, in both languages.
Yes, with consent that is separate from getting online. Marketing permission is its own box, never pre-ticked, and a guest who declines it still gets online at the same speed. Every consent is kept with the wording the guest saw and when they agreed.
In a single hosting region serving every country today, with the cross-border safeguards described in the processing agreement and the guest privacy notice. Every property’s data is encrypted with its own key. If data residency in Indonesia is a hard requirement, say so before signing up rather than after.
No. It is a description of how the product behaves once a property is set to Indonesia. Your own counsel decides what your property must do; the platform’s job is to make doing it straightforward.
