Indonesia's Ministry of Communication and Digital Affairs, Komdigi, has revealed that the majority of online gambling sites operating illegally within the country are using Cloudflare's content delivery network to disguise their locations. The finding was based on a review of 10,000 gambling site samples collected between 1 and 2 November 2025.
Komdigi's Director General of Digital Space Supervision, Alexander Sabar, said the analysis showed more than 76% of the sampled sites relied on Cloudflare, not only to hide IP addresses but also to shift domains quickly to bypass blocking measures. He said the requirement for Electronic System Provider (PSE) registration is essential for maintaining Indonesia's digital sovereignty and for enabling enforcement against prohibited content.
Sabar confirmed that the ministry has notified Cloudflare of the findings and subsequently summoned the company for clarification. He said the tech company has been urged to register under the Private PSE category without delay.
Should a platform fail to comply, the ministry may impose administrative measures that include access termination in line with existing laws.
Cloudflare is part of a list of 25 global digital platforms instructed to complete PSE registration as soon as possible. The list includes technology companies such as OpenAI, which operates the ChatGPT generative AI model.
Komdigi has said that its enforcement actions remain proportional given the large number of businesses and public services that depend on Cloudflare's infrastructure.
The ministry noted that its approach is grounded in Indonesia's Electronic Information and Transactions Law of 2008, the 2019 regulation on Electronic System and Transaction Providers and Ministerial Regulation Number 5 of 2020.
Komdigi reiterated that it remains open to cooperating with global platforms, provided they adhere to domestic rules. Sabar said safeguarding Indonesia's digital environment is a shared responsibility and that compliance with national law remains the essential threshold for all service providers.
Indonesia has repeatedly stated that PSE registration is a legal obligation for any platform serving local users
