Part of the series: Financial Management
- The Investment Activity Report, and Why it Exists
- The IDR 10 Billion Question: Paid-Up Capital for a PT PMA in Indonesia
- The Villa Question and the Line on Directors' Personal Expenses
- Consultant Tax in Indonesia: PPh Article 23 and the Consultant-Employee Line
- Sending Money Offshore: Outbound Payments from a PT PMA
- Anti-Money Laundering Compliance for a PT PMA in Indonesia
- Taking Money Out of a Company: Dividends, Fees, Salary and Shareholder Loans
- What it Costs to Put an Employee on the Books in Indonesia
- Invoicing Offshore Clients from a Company in Indonesia
- How a Dive School Owner Fell Two Years Behind on Tax and Put His Team at Risk
- The Hidden Price of Idle Cash and Slow-Paying Customers
- Short-Term Lending for Indonesian Businesses: When It Bridges a Gap, and When It Masks a Loss
- Online Gambling and the Indonesian Business: The Exposure to Owners, and the Duty to Employees
Current as at 16 July 2026.
Indonesians moved Rp286.84 trillion through online gambling platforms in 2025, across 422 million transactions, on the reporting of the financial-intelligence agency, the Pusat Pelaporan dan Analisis Transaksi Keuangan (PPATK). Around 12.3 million people made deposits that year, and 71.6 percent of them earn below Rp5,000,000 a month. Online gambling is unlawful in Indonesia, for the operator and for the player alike.
This reaches a business in two ways that an owner rarely sees together. One is financial: an owner, a director, or a member of finance staff gambles company funds, or the company account sits somewhere in the flow. The other is human: staff gamble in private, borrow to fund it, and bring the resulting fraud, absence, and financial distress into work.
We write this for the owner or director of a PT PMDN (Penanaman Modal Dalam Negeri, a limited company under domestic investment status) and a PT PMA (Penanaman Modal Asing, a limited company under foreign investment status), in two capacities: as a principal whose money and accounts are exposed, and as an employer whose staff may be affected. The article sets out the legal position, the financial-crime and account-freezing exposure, and the rights and duties an employer has, and it ends with the controls to put in place.
A note on how this is written. Problem gambling is a health condition as well as a source of legal risk, so the sections on staff set the employer’s legal rights beside a duty of care, and a short list of support resources sits at the end. The article gives no account of how these platforms operate, because that is not its purpose.
How online gambling reaches an Indonesian business
The scale is the reason this is a business subject rather than only a private one. The 2025 turnover was down 20 percent on 2024, which shows enforcement having an effect while the flows stay in the hundreds of trillions of rupiah. A share of the people inside those figures are the employees and the owners of ordinary Indonesian businesses.
Borrowing is what links gambling to money trouble a business already recognises. PPATK found that in 2024 around 3.8 million of 8.8 million players also had external loans, up from 2.4 million of 3.7 million a year earlier, and it has linked play by those without a sufficient income to illegal online borrowing. The short-term borrowing distress set out in our article on short-term lending for Indonesian businesses is, for a share of borrowers, the visible end of a gambling problem.
The exposure through the owner and the company’s money
The first exposure is the one an owner is least prepared for, because it treats the business itself as the vehicle. Where an owner, a director, or a member of finance staff gambles company money, three separate liabilities open at once.
The first is embezzlement, addressed in the employment section below.
The second is money laundering, because the proceeds of gambling are a predicate offence under Law Number 8 of 2010 on the Prevention and Eradication of Money Laundering. Moving, receiving, or using those proceeds engages the offences in Articles 3, 4, and 5 of that law, and Article 5 reaches a person who receives or uses funds that they should have suspected were the proceeds of crime. An owner who was wilfully blind to what was passing through the company account may fall within the reach of that provision.
The third is corporate liability. Articles 6 to 9 of the same law reach the company itself and its controlling personnel where an offence is committed by the company’s people for the company’s benefit, and the corporate fine runs up to Rp100,000,000,000, with further sanctions available. Whether a liability attaches to an owner who neither knew nor benefited turns on control and benefit, and that is a question for Indonesian counsel on the facts.
The account-level consequence arrives before any of those questions is answered. A company account that is flagged in a gambling flow can be frozen or closed by the bank on its own analysis, under the direction of the Financial Services Authority and PPATK and their anti-money-laundering and know-your-customer obligations, without a criminal charge and without a court order. Closure at the customer-identification-file level can take every account the business has at that bank at once, which stops payroll, suppliers, and collections together. The mechanics of the freeze, and the route to lift it, are set out in the banking section below.
The exposure through employees
The second exposure is quieter, and for most businesses it is the larger one. An employee in the grip of a gambling problem is first a person in distress, and that distress reaches the business in three ways: the debt that drives the gambling, the health cost visible in their work, and, at the far end, the theft of company money.
The debt is where an employer first sees it. An employee steadily drawing pay early, asking for advances, or showing the marks of illegal-lender harassment may be funding losses rather than meeting an ordinary shortfall, and this connects directly to the borrowing distress in the lending article in this series. These are prompts to offer support, not grounds to investigate a person’s private affairs, which the law does not permit. The health cost shows as absence, lost attention, and the withdrawal common in a person under financial fear. The financial risk to the company is the most immediate, because an employee who has lost wages, then savings, then borrowed, can reach a point where the company’s cash is the nearest source, and gambling-driven embezzlement is a documented pattern rather than a rare one.
The stance shapes the outcome as much as the action does. An employee with a gambling problem is a person with a health condition who may also have committed a disciplinary or a criminal act, and the two are kept apart: the conduct is addressed through the employment and criminal routes, and the person is offered a route to support. Treating the whole thing as theft alone misses the cause and tends to produce the next case. The lawful and the unlawful ways to act on what an employer notices are set out in the sections that follow.
The legal position, stated plainly
Online gambling is a crime in Indonesia, and the law reaches both the operator and the player. Under the Criminal Code as it stood before 2026, Article 303 set a penalty for running or providing gambling of up to 10 years or a fine up to Rp25,000,000, and Article 303 bis set a penalty for the player of up to 4 years or a fine up to Rp10,000,000.
The new Criminal Code, Law Number 1 of 2023, took effect on 2 January 2026 and now governs. It sets the operator offence in Article 426, at up to 9 years or a fine up to Rp2,000,000,000, and the player offence in Article 427, at up to 3 years or a fine up to Rp50,000,000. The online element sits in the Electronic Information and Transactions Law, where Article 27 paragraph (2) prohibits distributing electronic content with gambling material, and Article 45 paragraph (3), as amended in 2024, sets a penalty of up to 10 years and/or a fine up to Rp10,000,000,000.
The player is not outside the law. Enforcement policy has weighted operators, promoters, and the money flows, and that is a policy choice rather than an exemption, because a player can be and has been prosecuted. An owner should not treat the placing of bets by a member of staff as beneath legal notice.
Enforcement runs through three bodies. The task force established in 2024 expired at the end of that year and was not renewed, and its work now sits in the Desk Pemberantasan Judi Online under the Coordinating Ministry for Political and Security Affairs, led operationally by the National Police. The Ministry of Communication and Digital Affairs blocks access, and reported around 3.45 million gambling sites blocked between October 2024 and May 2026. PPATK traces the money and works with the Financial Services Authority and the banks on the accounts, which is where a business is most likely to feel it.
The banking and financial-crime exposure
The account is where the risk becomes concrete for a business that has done nothing wrong, so this section sets out how a clean account is caught, what a freeze looks like, and how it is lifted.
Gambling operators do not receive player money into their own names. They route it through networks of collector accounts, often opened with bought or rented identities, and a legitimate account that transacts up or down that chain is drawn into the flagging net without any knowledge of the source. The scale of the response is the reason an ordinary business should attend to it. Through May 2026, banks blocked around 32,453 accounts linked to gambling, closed around 51,200 customer relationships, and rejected around 2.8 million prospective customers, on the reporting of the Financial Services Authority, and gambling reached 35.28 percent of all suspicious-transaction reports in the first quarter of 2026. In a separate episode in 2025, around 122 million dormant accounts were frozen and later reopened.
The freeze has defined forms and limits. A financial-services provider may postpone a transaction for up to 5 working days. PPATK may order a temporary halt for up to 5 working days, extendable to 15. An investigator, a prosecutor, or a judge may block an account for up to 30 working days. These are the outer limits in the law, and Indonesian counsel should confirm the current day-counts on a live case.
An ordinary trading company is not a reporting party under the money-laundering law and owes no customer-due-diligence or suspicious-transaction duty, because that burden sits on the bank rather than on the account holder. A business becomes a reporting party only where it deals in property, motor vehicles, precious metals, jewellery, art, antiques, or auctions. What every business is exposed to, reporting party or not, is the substantive offences above and the freezing of its accounts.
Lifting a freeze depends on its kind. An administrative halt is cleared by filing the objection form with PPATK and completing the re-profiling at the branch where the account was opened, with identity documents and the account records. A block ordered by law enforcement is a different case, and it is lifted only when the underlying investigation is resolved, so an early conversation with counsel is the right first step. The money is stated to remain safe during an administrative halt, so the immediate loss is of access rather than of funds.
The employer’s rights and duties, side by side
An employer facing gambling in the workforce has clear rights and a real duty, and the two work best applied together. This section states the law as it stands, and its application to any particular case should be confirmed with an Indonesian advocate.
The right to act on workplace gambling is established. Government Regulation Number 35 of 2021, in its Article 52 and the accompanying elucidation, lists gambling in the work environment, and the embezzlement or theft of company money, among the urgent violations that permit dismissal. An urgent-violation dismissal needs no prior warning letter, though the offence must be written into the employment contract, the company regulation, or the collective agreement to be reliably enforceable, which is a control the next section returns to. The severance consequence is limited, because a dismissal on this ground gives the employee compensation for accrued rights and separation pay alone, with no ordinary severance or service award.
The criminal and the employment routes are generally treated as separate tracks, and an employer may in principle pursue both, though the routing should be confirmed with an Indonesian advocate. Embezzlement of company money is an offence under the new Criminal Code, at Article 486 for the basic form, up to 4 years, and Article 488 where the embezzlement arises from the employment relationship, up to 5 years. These replace the former Articles 372 and 374, and the current numbers should be used.
The duty runs the other way. Indonesian law places general occupational health obligations on an employer, and although there is no gambling-specific legal duty to provide support, offering a route to help is sound practice and sound risk management, because it addresses the cause that discipline alone leaves in place. An employer who pairs a clear disciplinary line with a genuine assistance pathway protects the business and the person at the same time.
Monitoring is subject to a legal limit. An employer may monitor the use of company systems, yet that monitoring processes personal data and is governed by Law Number 27 of 2022 on Personal Data Protection. It must be disclosed to staff in advance, proportionate to its purpose, and limited to that purpose, and it must rest on a lawful basis. Covert surveillance of an employee’s private financial affairs is not a safe course, and an employer who reaches for it trades a gambling risk for a data-protection one.
What an owner should put in place
The controls that answer both exposures are ordinary governance, applied with this risk in mind. None is unusual, and applied together they remove the openings gambling relies on.
Put the financial controls first. Separate the duties of authorising, making, and reconciling payments, so that no single person can move company money into an outside account unseen, and require dual authorisation above a set figure. Reconcile the bank accounts often enough that an unexplained transfer is found in days rather than at the year end. These controls stop the owner-side exposure at its source.
Write the conduct rules into the company regulation. Name gambling in the work environment and the embezzlement of company money as dismissible conduct, because the right to dismiss on those grounds is reliable only where they are recorded in the contract, the company regulation, or the collective agreement. Set a device and acceptable-use policy in the same place, disclosed to staff, so that any monitoring later rests on a stated and lawful basis.
Keep monitoring within the law. Monitor company systems only, on a disclosed and proportionate basis, and do not reach into an employee’s private financial life, because the Personal Data Protection Law makes covert financial surveillance an exposure in its own right.
Build an assistance pathway. Name the person a manager refers to, keep any disclosure confidential and separate from the disciplinary file, and treat a disclosed gambling problem as a health issue rather than only a disciplinary one, while the disciplinary and the criminal tracks remain for the conduct rather than the condition. This applies equally to an owner or a director, not only to staff. The resources listed at the end of this article are the referral point.
Keep the banking clean. Know who transacts on the company account, respond quickly to any freeze through the objection process rather than waiting, and keep the identity and transaction records that a re-profiling will require. Prompt response is what keeps a freeze to days rather than weeks.
How TraceWorthy helps
A gambling exposure is never a single-issue question, which is why an owner is poorly served by advice that treats it as one. It touches company governance, employment law, financial-crime exposure, banking, and the wellbeing of a workforce, and each of those affects the others.
TraceWorthy works across those connected areas. We review the financial controls and the company regulation that decide whether a dismissal will stand, we advise on the money-laundering and account-freezing exposure and the response to a freeze, and we help an employer build a disciplinary and support framework that is lawful under the manpower and data-protection rules. This is advisory work across the life of the company.
The TraceWorthy team are Indonesian lawyers, accountants, tax specialists, and compliance professionals whom Founder Tracy Wilkinson recruited and trained to a standard set against international practice. Tracy’s own contribution is the business model and the strategy.
If online gambling has touched your business, through the accounts or through your staff, speak with the TraceWorthy team. We will establish the exposure and steady the immediate position, and we will build the controls that keep it from returning.
This article is general information current as at 16 July 2026. Criminal law, financial-crime rules, and employment rules change, and the position for any business depends on its own facts, so obtain advice for your own situation before you act. It is not legal, tax, or financial advice, and it does not create an advisory relationship or reach any conclusion on a particular reader’s position.
If you or someone you work with needs support for a gambling problem in Indonesia, help is available. The national mental-health line is reached by dialling 119 and selecting extension 8, or through Healing119.id. The Ministry of Communication and Digital Affairs runs a Stop Judi Online help channel. Hospital programmes for gambling addiction exist, including at RSJ Menur in Surabaya, and gambling-impact counselling is available in Jakarta through the PUSPA service. Please confirm current contact details, as these services change.
Frequently Asked Questions
Is online gambling illegal in Indonesia, including for the player?
Yes, for both. Running or providing gambling is an offence under the new Criminal Code at Article 426, at up to 9 years or a fine up to Rp2,000,000,000, and placing bets is an offence under Article 427, at up to 3 years or a fine up to Rp50,000,000. The online element is an offence under the Electronic Information and Transactions Law, at up to 10 years and/or a fine up to Rp10,000,000,000. Enforcement has weighted operators and money flows, which is a policy choice rather than an exemption, so a player is not outside the law.
My employee is gambling. Can I dismiss them?
You can, where the ground is properly set. Government Regulation Number 35 of 2021 lists gambling in the work environment among the urgent violations that permit dismissal without a prior warning letter, and it treats the embezzlement of company money the same way. The ground is reliable only where gambling and embezzlement are named as dismissible conduct in the employment contract, the company regulation, or the collective agreement, so the first step is to check that they are. A dismissal on this ground gives the employee accrued rights and separation pay alone. Because a gambling problem is also a health condition, sound practice is to offer a route to support alongside any disciplinary step, using the resources at the end of this article. Confirm the position with an Indonesian advocate before acting.
Company money has been used for gambling. What is our exposure?
Several liabilities open at once. The person who took the money faces embezzlement under the new Criminal Code, at Article 486 or, where it arises from their employment, Article 488. Because the proceeds of gambling are a predicate offence for money laundering, moving or using those funds engages the money-laundering law, and a person who should have suspected the source may be within its reach. The company and its controlling personnel can face corporate liability where an offence was committed for the company’s benefit. The company account can be frozen regardless of fault. Take advice quickly, because the tracks run in parallel.
Our company account was frozen over a transaction we do not recognise. What now?
Establish which kind of freeze it is. An administrative halt by the bank or PPATK is cleared by filing the objection form and completing the re-profiling at the branch where the account was opened, with your identity documents and account records. A block ordered by law enforcement is lifted only when the underlying investigation is resolved, so counsel should be involved early. The funds are stated to remain safe during an administrative halt, so the immediate loss is of access. Move quickly, because a frozen account stops payroll and suppliers together.
Can I monitor staff to find out who is gambling?
Within limits. You may monitor the use of company systems, yet that processes personal data under the Personal Data Protection Law, so it must be disclosed to staff in advance, proportionate, limited to a stated purpose, and grounded in a lawful basis. Covert surveillance of an employee’s private financial affairs is not a safe course and creates a data-protection exposure of its own. Set a disclosed device and acceptable-use policy first, and take advice on what monitoring your basis will support.
Where can someone get help for a gambling problem?
Help is available and worth offering before discipline is the only response, and it applies to an owner or a director as much as to a member of staff. The national mental-health line is reached by dialling 119 and selecting extension 8, or through Healing119.id. The Ministry of Communication and Digital Affairs runs a Stop Judi Online help channel. Hospital programmes exist, including at RSJ Menur in Surabaya, and Jakarta offers gambling-impact counselling through the PUSPA service. Please confirm current contact details, since these services change.