This tour operator website design service builds websites for businesses that run trips within Indonesia: tour operators, open trips, dive centers, water sports, and tourist boats. It suits operators anywhere from Bali and Labuan Bajo to Raja Ampat. Each package shows its itinerary, what is and is not included, and the safety details, in Indonesian and English. Guests ask about dates on WhatsApp, and you are the one who confirms. I handle the work myself, as a website engineer and technical lead.
This article covers tours inside Indonesia and special-interest travel such as diving. Umrah and hajj trips follow different rules, which I cover in the article on umrah travel agency websites. If your trips are run by a village community, the tourist village website article is the better fit.
In short
- Package pages with a day-by-day itinerary, what is and is not included, and notes on weather and safety.
- Date checks through WhatsApp, with no "available" calendar that you have not confirmed.
- A legal details page with your NIB (business identification number), the correct KBLI 2025 code, and only the certificates you actually hold.
- An English version with its own page addresses for international guests.
- Details matched to your Google Business Profile, including a reservation link that opens WhatsApp.
- A one-time build fee, the domain plus a server if chosen as running costs, and free malware cleanup for 3 months. Start with the form on the homepage.
Travellers research first, then book
Foreign tourist arrivals in 2025 reached 15.39 million, up 10.8 percent, according to BPS (Statistics Indonesia) data cited by BCA Sekuritas. Domestic tourist trips that year came to about 1.2 billion, growth of 17.55 percent, as CNBC Indonesia reported. In December 2025 alone, BPS recorded 1.41 million foreign tourist visits.
Travellers shop around. Those flying in from abroad, in particular, compare several operators before they send a message. They read the itinerary, add up what is not included, and look for signs that the operator is legitimate and takes safety seriously. Instagram is good for photos. It rarely answers all of that on one page a guest can forward to the friends they are travelling with.
Tourism business licences: write what you hold, not what sounds official
Since 15 June 2026, the OSS licensing system has used KBLI 2025, the updated list of Indonesian business classification codes. Several tourism codes changed with it. Micro and small travel agents now use code 79110, and an NIB is all they need. Travel bureaus (biro perjalanan wisata), the tour operator category, use 79121. According to OSS, that code is only for medium and large businesses that hold a Standard Certificate (Sertifikat Standar).
Diving, snorkelling, and other water tourism fall under 93297. Tourist boat charter with crew sits under 50113. Tour guides use 79903.
The difference matters for the words on your website. An NIB is not the same thing as a Standard Certificate. Writing "officially licensed by the Ministry of Tourism" when you hold only an NIB can mislead guests. The tour websites I build include a legal details page with your business entity name, NIB, the matching KBLI code, and any additional permits. A prospective guest or partner can confirm the NIB through the search menu on the OSS site.
Honest packages: included, not included, and what guests pay on the spot
Article 10 letter a of the Consumer Protection Law bans misleading statements about prices or rates. With tour packages, the usual source of a dispute is a cost guests only discover at the destination. So every package on the website carries two lists, written with equal care: what is included and what is not.
Take Bali first. Foreign tourists must pay a Rp150,000 levy under Bali Regional Regulation 6/2023, as amended by Regional Regulation 2/2025. They pay it through Love Bali or an authorised collecting agent, and the voucher arrives by email. The website says whether the levy is part of the package or left for guests to pay, then links to the official page.
In Labuan Bajo, a package should say whether national park entry tickets and the SIMAKSI (the conservation area entry permit) are included. Travel insurance needs the same treatment. Article 26 of Law 10/2009 on Tourism requires businesses to give accurate information and to provide insurance where the activity carries high risk. Diving and boat trips are exactly the kind of activity whose cover you should spell out.
Date checks through WhatsApp, including the Komodo National Park quota
Since 1 April 2026, the Komodo National Park Office has capped visits at 1,000 tourists per day, and Padar Island is split into three sessions. Tickets are sold only through SiOra, the park office's official system. It shows a daily quota calendar that marks each day as available, limited, or full.
That is why the tour websites I build never display a "seats available" calendar you have not checked. Article 9(1) letter e of the Consumer Protection Law forbids promotion that makes a service look available when it is not. The "check dates" button opens WhatsApp with the package name, date, group size, and home city already filled in. On Komodo packages, the page links to the SiOra calendar so guests can see the quota for themselves.
Deposits come in by bank transfer or through a payment link that belongs to your business. A booking system with a calendar and automatic payment only makes sense once you have at least one admin and date questions no longer fit in chat. It costs far more to build and to keep running, so there is no need to hurry. I lay out the trade-offs in the article on catalog stores with WhatsApp orders.
Safety and conservation rules in every package
Guests have good reason to ask about safety. The KM Putri Sakinah sank in the Padar Strait on 26 December 2025, and four Spanish tourists were reported missing. Law 18/2025, the third amendment to the Tourism Law, adds a tourist's right to information on disaster mitigation and emergencies.
The website gives each package a place for that information. It covers the season and the wave conditions guests usually meet, the safety gear on board, who calls off a trip for weather, and how refunds work. You supply the facts. I arrange them so guests can read them before they pay.
Conservation rules also go on the package page. The Ministry of Tourism has asked operators, guides, and boat providers in Raja Ampat to make sure guests follow the rules. Anyone who facilitates a violation will be held responsible. A guest who has read "do not stand on the coral" before leaving home is easier to guide once in the water.
Promotional claims that are safe to write
Article 9(1) letters j and k of the Consumer Protection Law forbid exaggerated words such as "safe" or "risk-free" without full information. They also rule out promises that are not yet certain. Lines like "100% safe" or "guaranteed manta sightings" are best left out. The website states the odds as they are instead. It might name the best manta season based on what your guides have seen, and say that the decision to sail follows the weather.
A form that does not ask for health data or children's passports
Dive centers usually ask for a medical statement before anyone dives. Article 4(2) of Law 27/2022 classes health data and children's data as specific personal data that needs stronger protection. The form on the website asks only for a name, dates, the number of guests, and home city. Medical statements and passport copies are dealt with on site, or through a channel you control.
Instructors and guides: certifications guests can check
Dive certifications such as PADI and SSI are private international qualifications, not licences from the state. The website can list each instructor by name with a certification number. SSI numbers can be looked up on the SSI verification page, while PADI member dive centers appear in the PADI dive shop locator.
Article 53 of Law 18/2025 also says the competence of tourism workers is proven by a certificate from a licensed professional certification body. Guides who hold one can be shown with their certificate number.
Your English pages and your Google Maps listing
Operators in Bali, Labuan Bajo, and Raja Ampat serve many foreign guests, so the English version comes as standard rather than as an add-on. Every page has its own counterpart in the other language. That lets Google, and AI answers such as AI Overviews, ChatGPT, and Perplexity, show the version that matches the language of whoever is asking.
Google Business Profile offers reservation and appointment links that can point to WhatsApp or a package page. Each package can be listed as a service with a short description, and the details on the website are kept identical to that profile. The website is also built to pass Core Web Vitals, because guests often open package pages on a phone with a weak signal at the harbour. For a benchmark, this site, built the same way, reached 94 in a Lighthouse mobile test on 12 October 2026.
Tracking for operators who advertise
Operators who run ads on Google or Meta can measure the actions that lead to bookings: a tap on the check-dates button, or an inquiry form sent. The tags come from your own ad accounts and start working only once the visitor agrees. No ads? Then the website runs with no tracker on it.
Tour website security, and free malware cleanup for 3 months
A hacked tour operator website can send guests to a fake payment page. The guest loses money. Your name takes the blame. Websites I build for tour operators are secured to the standard of this site, which earned an A+ on securityheaders.com and Mozilla HTTP Observatory on 12 October 2026. You are welcome to rerun both tests yourself. I keep the specific measures off public pages on purpose, since a published list would only hand intruders a map.
Should malware get in during the first 3 months after launch, I remove it at no charge. That period is written on your proof of payment, and other packages give anywhere from 1 to 6 months. The work means deleting the malicious code, restoring files from the latest backup, and closing the gap on the website I delivered. The guarantee is a cleanup service, not compensation for any loss.
Once the guarantee has run out, a cleanup is billed as a new job, and a serious case can cost tens of millions of rupiah. Some causes are never covered: passwords you shared, an infected phone or laptop, changes made by someone else, and outages at the server or domain provider you picked. Components left to age after the guarantee lapses without renewal are excluded too. For the fine print on what a tour site's guarantee leaves out, read the terms page. I can stand behind this because website malware removal is part of my everyday work.
Cost: paid once, with no commission per booking
A tour website is paid for once, in several stages, and the breakdown is in writing from day one. Nothing is skimmed off each booking the way third-party platforms do it. What recurs is the domain, plus a server if you choose one. A package website where guests check dates on WhatsApp generally runs without a monthly server.
Support after handover is up to you. Taking it gets you fixes, component updates, and a limited amount of help on request. You change packages, photos, and seasons yourself through the panel. If you later want a third language, a page per destination, or a booking system, each addition is quoted on its own at a special rate.
Ready to use, in your business's name; source code if you need it
What you receive is a ready-to-use website. That means the built files running on your business domain, the domain and accounts in your name, a panel for editing packages, and a handover document. You can move the website to another host whenever you like. If you ever switch to a different web manager, my access can be revoked without the site going down.
Source code, meaning the project files used to rebuild the website from scratch, is not in the default package. For a tour operator this keeps the price down. Your content stays editable through the panel, and my support covers the version I delivered. The code earns its cost if you employ your own developer or plan to connect the website to a booking system built just for you. It is priced on its own, costs much more, and sometimes cannot be offered because it contains licensed components.
Tour operators choose: AI on your own, an unclear agency, a free template, or an engineer?
| Consideration | Building it yourself with AI | An agency with no clear accountability | A free hosting template | Built by an engineer (this service) |
|---|---|---|---|---|
| Packages | "100% safe, Komodo dragons guaranteed" | Depends | Package cards with no details | Included, not included, weather, safety |
| Availability | A fake "seats available" calendar | Often sells you a booking engine | A ready-made calendar add-on | Date checks on WhatsApp, link to the SiOra quota |
| Legal details | "Officially licensed" with no number | Never discussed | None | NIB, KBLI 2025, certificates you actually hold |
| English version | Machine translation | Extra fee | An automatic translation add-on | Standard, with paired pages |
| Security | Nobody keeps watch | Untested | Updated alongside thousands of sites | Tested with public tools, free 3 month cleanup |
| Yearly cost | AI tool and builder subscriptions | Monthly retainer | Free until you need a feature | Domain, plus a server if chosen |
AI can turn out an attractive package page in minutes. It also tends to write promises the Consumer Protection Law forbids, and availability calendars wired to nothing. I walk through a real example of that kind of mistake in the case of an online store built entirely by AI. An agency with unclear accountability often registers the domain in its own name. Changing managers then means losing the address your guests already know. A free template works for a single contact page, but it was never designed for two-language packages with safety information.
If you sell hundreds of departures a month with automatic payment, use a dedicated reservation system, and the website I build simply links to it.
Who is behind this tour operator website design service?
Nobody else touches the work on this tour operator website design service. I am Dicky Ibrohim, a website engineer and technical lead, and my track record is on the about page. I build websites and apps, repair broken ones, and clean up sites hit by malware, and I have handled thousands of cases. AI takes care of the repetitive parts for me, and every result then goes through my own testing. On a tour website that means pressing the check-dates button until WhatsApp opens with the right message.
I am not a tourism licensing consultant or a marine safety expert. Packages, prices, licences, certificates, and safety information come from you. The material I create is licensed, and the photos and text you supply are warranted by you.
Process: from package list to launch
- Tell me about your business through the form on the homepage: the kind of trips you run, the destinations, the languages your guests speak, and the licences you hold.
- My written offer lands in your inbox in one or two business days. It sets out the page structure, the work schedule, the fee for each stage, whether a server is needed, the malware guarantee period, and what support includes.
- A short interview about your packages, seasons, cancellation policy, and the questions guests send most often.
- Text and design in both languages: I draft them, and you check them, above all the included and not-included lists.
- Testing on phone and laptop: the check-dates button, the form, and the Love Bali or SiOra links are tried one at a time.
- Launch, followed by the handover of access, ownership documents, and a guide to updating your packages.
What you need to prepare
- Your business name, NIB, KBLI code, and any additional permits.
- A list of packages with itineraries, what is and is not included, and the cancellation policy.
- Safety information: the boat, equipment, insurance, and weather rules.
- The names of guides or instructors with their certificate numbers, if you want them shown.
- Your own trip photos, your WhatsApp number, and your Google Business Profile account if you already have one.
Eight questions to ask before choosing who builds your tour website
- Does every package list what is not included? (Yes, levies and entry tickets among them.)
- Does the website show an availability calendar? (No; guests check dates on WhatsApp.)
- Is there an English version? (Yes, as standard, with paired pages.)
- Which licences appear on the site? (Only the ones you actually hold, with their numbers.)
- Who owns the domain and accounts? (Your business does.)
- What happens if the website gets malware? (It is cleaned free for 3 months after launch, as stated on the proof of payment.)
- Which costs recur? (The domain, plus a server only if you choose one.)
- Can a booking system be added later? (Yes, at a special rate, once chat can no longer keep up.)
First step: send me your package list
Guests pick the operator whose packages are clear, whose costs hold no surprises, whose licences can be checked, and who explains safety before departure. A two-language website that carries all of that is the heart of this tour operator website design service.
Tell me about your trips through the form on the homepage, or email hello@dickyibrohim.com. My reply covers a suggested page structure, a cost breakdown, and an estimate of when the website can go live.
Frequently asked questions
How much does a tour operator website cost?
You pay for the build once, in a few stages, against a written breakdown. After launch only the domain recurs, plus a server if you pick one, and no commission is taken per booking. The figure depends on how many packages and languages you need; I send it once you fill in the form on the homepage.
Does an open trip business need a booking engine?
Usually not yet. While date questions can still be answered in chat, a check-dates button that opens WhatsApp costs less and never displays availability you have not checked. A booking system starts to pay off once you have a dedicated admin and the chat begins to overflow.
Which licences should a travel website show?
Your NIB and the matching KBLI 2025 code, for example 79110 for micro and small travel agents or 93297 for dive tourism. The Standard Certificate and any other permit go on the page only once they have actually been issued.
Does a tour website need to be in two languages?
For operators in Bali, Labuan Bajo, or Raja Ampat, yes, because many of their guests come from abroad. The English version is built as paired pages, not as an automatic translation.
How do I sell Komodo packages when there is a daily quota?
Guests ask about dates on WhatsApp, and you check the quota on SiOra before you confirm. The package page links to the SiOra quota calendar so guests can look at it as well.
Can I promise in my trip promotions that a tour is 100% safe?
Better not. Article 9(1) of the Consumer Protection Law bans words such as safe or risk-free without complete information. Describe the safety equipment and the rules for weather cancellations instead.
Do foreign tourists visiting Bali have to pay Rp150,000?
Yes, under Bali Regional Regulation 6/2023 as amended by Regional Regulation 2/2025, paid through Love Bali or a collecting agent. The package page states whether the levy is included or paid by the guest.
Can the website form ask divers for a medical statement?
Better not through the website form. Health data and children's data are specific personal data under Law 27/2022, so they are safer handled on site or through a channel you control.
Do I get the source code?
The default is a ready-to-use website on your business domain, with a package panel and a handover document, and you can move it to any hosting. The source code is a separate option, far more expensive and not always available; the offer states whether it applies.
What if my tour website gets malware?
If it happens within 3 months of launch, as written on the proof of payment, I clean it up for free; other packages give 1 to 6 months. You get a cleanup service, not compensation; the scope is set out on the terms page.
