Running an online store from Bali lawfully in 2027 requires a registered Indonesian business entity, a Business Identification Number (NIB) covering the electronic commerce classification, compliance with Indonesia’s rules on trading through electronic systems, consumer protection obligations on the storefront itself, and handling of customer data under the Personal Data Protection Law. Bali online store legal requirements sit mostly in national regulation, so a seller in Canggu and a seller in Denpasar carry the same core obligations, with location mattering only for premises and warehousing.
This article is general information for planning purposes and is not legal, tax, or data-protection advice. Digital regulation in Indonesia is actively developing, so confirm current requirements with OSS, the ministry responsible for communications and digital affairs, and a licensed adviser before launch.
Do you need a company to sell online from Bali?
Commercial selling through electronic systems is a registered business activity in Indonesia, and Government Regulation No. 80 of 2019 on trading through electronic systems sets obligations for business actors selling to Indonesian consumers, including identity disclosure and clear contract terms. Operating a shop through a personal social account does not remove those obligations; it only makes them harder to satisfy.
Practically, most sellers register an entity for three reasons beyond compliance: payment gateways and marketplaces ask for company documentation, suppliers issue invoices to a registered buyer, and any partner doing due diligence will ask who the contracting party is. Owners who want the entity and the electronic commerce classification handled together often start with a scoped Bali e-commerce company setup rather than retrofitting a structure after sales begin.
Which classifications and licences apply?
Electronic commerce is registered under its own KBLI classification, separate from physical retail and separate again from software development or digital services. Under risk-based licensing, many online trading activities fall in the lower risk tiers, meaning the NIB plus a standard certificate is often the licensing output rather than a verified licence.
- Register the e-commerce classification, plus the retail or wholesale codes if you also sell offline.
- Add import classifications separately if you source stock from abroad in the company’s name.
- Keep the deed’s stated activities aligned with the codes registered in OSS.
- Confirm the risk tier for each code, since it determines whether an inspection follows.
Sellers who plan to run the operation without a permanent office in Indonesia should check domicile requirements early, because a registered address is still needed. Guidance on registered office and domicile in Bali covers what qualifies.
What must the storefront itself disclose?
Indonesian consumer protection law, in force since Law No. 8 of 1999, requires accurate product information and prohibits misleading claims, and the electronic trading rules add specific disclosure duties for online sellers. That means your product pages, terms, and checkout flow are part of the compliance surface, not just marketing assets.
| Storefront element | What is generally expected |
|---|---|
| Seller identity | Legal entity name and contactable details, not only a brand handle |
| Product information | Accurate description, condition, and price presented in a clear way |
| Terms and returns | Stated conditions for cancellation, return, and complaint handling |
| Privacy notice | What personal data is collected, why, and how it is handled |
Marketplaces impose their own seller rules on top of the legal baseline, and those rules are contractual. Complying with a marketplace policy does not discharge the statutory obligations, and satisfying the statute does not protect a listing from removal under platform terms.
How does the Personal Data Protection Law affect an online store?
Indonesia enacted Law No. 27 of 2022 on Personal Data Protection, which establishes obligations for parties that control or process personal data, including lawful basis for processing, purpose limitation, security measures, and notification duties in the event of a data breach. An online store collects personal data by design, through accounts, checkout, shipping, and marketing lists.
The practical implications are operational rather than theoretical: know what data you collect and where it is stored, restrict internal access, use processors under written terms, and be able to respond when a customer asks about their data. Cross-border transfers, common when using overseas hosting or marketing tools, deserve specific attention rather than assumption.
What tax and payment obligations follow?
An online business has the same tax registration and filing obligations as any other Indonesian company, with the added complexity that digital sales channels produce transaction records held by third parties. Marketplaces and payment providers report and withhold in various ways, so reconciling platform statements against your own books is a monthly discipline rather than a year-end exercise.
Payment providers also run their own onboarding checks, typically requesting company documents, the tax number, a company bank account, and evidence that the registered activity matches the goods being sold. A mismatch between what the NIB says and what the website sells is a common reason for onboarding delays.
Set the structure before you scale the traffic
Fixing compliance after a store has customers, subscriptions, and platform integrations is far more disruptive than establishing it first. Register the right classifications, publish honest terms, and document your data handling from launch.
Founders operating from outside Indonesia frequently combine this with a remote formation process, and registering a Bali company online is generally possible for the entity stage with properly executed authorisations, while some steps still need local presence. To map your channels and requirements, message our business desk on WhatsApp at https://wa.me/6281139414563 or email bd@juaraholding.com with your product categories, sales channels, and where your customers are located.
Frequently asked questions
Can I sell online in Indonesia without registering a company?
Commercial selling through electronic systems is a regulated business activity, and the rules on trading through electronic systems impose identity, disclosure, and contract obligations on business actors selling to Indonesian consumers. Beyond the law, payment gateways, marketplaces, and suppliers routinely require company documentation before onboarding. Selling through a personal account does not remove the obligations, it just makes them harder to meet.
Does the Personal Data Protection Law apply to a small store?
Law No. 27 of 2022 applies to parties that control or process personal data, and an online store collects personal data through accounts, checkout, shipping, and marketing. Size affects proportionality of your measures, not whether the obligations exist. At minimum, know what you collect, restrict access, use written terms with processors, and have a process for customer requests and for breach handling.
Do I need a physical address in Bali for an online business?
A registered company still needs a domicile address that satisfies local requirements, even when operations are largely digital. Which addresses qualify depends on the regency and on whether the activity is treated as office-based or requires premises for stock. If you hold inventory, warehousing must sit in an appropriately zoned location, which is a separate question from the company’s registered address.
How are marketplace sales treated for tax?
Sales through marketplaces remain the company’s revenue and must be reported, even though the platform holds the transaction records and may apply its own withholding or reporting mechanisms. The practical requirement is reconciliation: match platform settlement reports to your books each month so that reported revenue, fees, and withholdings agree. Ask a registered tax consultant to confirm the treatment for your specific channels.