Terms and Conditions (Malaysia)

A Terms and Conditions in Malaysia fixes the respective duties and entitlements of the parties to the arrangement.

The Electronic Commerce Act 2006 (ECA 2006) provides the statutory framework for electronic contracts in Malaysia. Under Section 7 of the ECA 2006, a contract is not invalid solely because it was formed through electronic means, and acceptance communicated electronically — including by clicking an 'I Agree' button — constitutes valid acceptance under Malaysian law. The Electronic Commerce Act 2006 is enforced by the Ministry of Communications.

The Consumer Protection Act 1999 (CPA 1999) imposes mandatory protections for consumers in Malaysia that cannot be contracted out in Terms and Conditions. The CPA 1999 prohibits false or misleading representations under Section 9, unconscionable conduct under Section 14, and unfair contract terms under Part IIIA (inserted by the Consumer Protection (Amendment) Act 2010). Terms that exclude liability for personal injury, death, or fundamental breach are void against consumers under the CPA 1999.

The Personal Data Protection Act 2010 (PDPA 2010) requires businesses that collect personal data from customers to maintain a Privacy Notice — a document that is distinct from but closely related to the Terms and Conditions. The PDPA 2010 General Principle requires that personal data be processed only for purposes that the data subject has been notified of and, where required, consented to. Malaysian businesses typically incorporate the PDPA 2010 privacy notice requirements into their Terms and Conditions or link to a separate Privacy Policy.

A Malaysia Terms and Conditions document differs from a Privacy Policy (which deals exclusively with personal data processing under the PDPA 2010) and a Refund Policy (which addresses returns and refunds under the Consumer Protection Act 1999 and the Sale of Goods Act 1957). Many Malaysian businesses publish all three as separate but interlinked documents on their websites.

The legal framework governing the Terms and Conditions (Malaysia) in Malaysia draws on several key statutes and regulatory bodies. Under Malaysian law, the Contracts Act 1950 (Act 136) governs contractual obligations. The Companies Act 2016 (Act 777) regulates corporate entities through the Companies Commission of Malaysia (SSM). The Employment Act 1955 (Act 265) and the Department of Labour govern employment matters. The Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection Department protect personal data. The Inland Revenue Board of Malaysia (LHDN) administers tax obligations. The Industrial Court adjudicates employment disputes under the Industrial Relations Act 1967 (Act 177). Parties executing a Terms and Conditions (Malaysia) in Malaysia should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Companies Act 2016 (Act 777) sets the foundational requirements.

A Malaysia Terms and Conditions document is required whenever a business offers goods, services, or digital content to customers through a website, app, or digital platform.

Terms and Conditions are needed when a Malaysian e-commerce business sells products through its own website or through platforms such as Shopee Malaysia, Lazada Malaysia, or Mudah.my, to specify the terms of sale, delivery timelines, return and refund policies consistent with the Consumer Protection Act 1999, and limitation of liability provisions.

Terms and Conditions are required when a SaaS company provides software or digital services to Malaysian businesses or consumers, to specify acceptable use restrictions, account suspension rights, service availability commitments, payment terms, and the licence granted to users under the Copyright Act 1987.

Terms and Conditions are necessary when a Malaysian content platform — such as a news website, online education platform, or streaming service — publishes user-generated content, to establish content standards, the platform's right to remove infringing or illegal content, and the indemnification obligations of users who post content that violates the Communications and Multimedia Content Code (CMCC).

Terms and Conditions are required when a financial technology (fintech) company regulated by Bank Negara Malaysia (BNM) under the Financial Services Act 2013 or the Securities Commission Malaysia under the Capital Markets and Services Act 2007 provides digital financial services to Malaysian consumers, to disclose fees, risks, dispute resolution procedures, and regulatory disclaimers.

Terms and Conditions are needed when a business collects personal data from Malaysian users through contact forms, subscription forms, or checkout processes, to satisfy the PDPA 2010 Notice and Choice Principle by informing users of the purposes for which their data is collected and processed.

Parties in Malaysia should prepare a Terms and Conditions (Malaysia) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Under Malaysian law, the Contracts Act 1950 (Act 136) governs contractual obligations. The Companies Act 2016 (Act 777) regulates corporate entities through the Companies Commission of Malaysia (SSM). The Employment Act 1955 (Act 265) and the Department of Labour govern employment matters. The Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection Department protect personal data. The Inland Revenue Board of Malaysia (LHDN) administers tax obligations. The Industrial Court adjudicates employment disputes under the Industrial Relations Act 1967 (Act 177). Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution.

A valid Malaysia Terms and Conditions document must contain the following essential elements to be legally effective and compliant with Malaysian consumer and digital laws.

Business Identification: The full legal name of the business, its Companies Commission of Malaysia (SSM) registration number under the Companies Act 2016, and its registered address. This information is required under the Consumer Protection Act 1999 and establishes the contracting party.

Acceptance Mechanism: A clear statement of how users accept the Terms and Conditions — for example, by clicking 'I Agree', creating an account, or making a purchase. Under the Electronic Commerce Act 2006 (ECA 2006), Section 7, electronic acceptance constitutes valid contract formation.

Scope of Services: A description of the goods, services, or digital content covered by the Terms, including any geographical restrictions (such as services available in Malaysia only), language of service, and applicable product or service categories.

Payment Terms: Pricing in Malaysian Ringgit (MYR/RM), payment methods accepted, billing cycle for subscriptions, applicable Sales and Service Tax (SST) at 8% under the Service Tax Act 2018, and the consequences of late or failed payment.

Intellectual Property: The business's ownership of all content, trademarks, software, and materials on the platform under the Copyright Act 1987 and the Trade Marks Act 2019 (Malaysia), and the licence granted to users for personal, non-commercial use.

Acceptable Use Policy: Prohibited activities including hacking, scraping, distributing malware, posting illegal or obscene content (prohibited under the Communications and Multimedia Content Code), and using the platform to support illegal transactions under Malaysian law.

Limitation of Liability: The extent to which the business limits its liability for indirect, consequential, or economic loss. Limitation clauses must comply with the Consumer Protection Act 1999 — clauses that exclude liability for personal injury, death, or fraudulent misrepresentation are void against consumers.

Data Protection: Reference to the Privacy Policy and the business's obligations under the Personal Data Protection Act 2010 (PDPA 2010), including the basis for processing personal data and users' rights to access and correct their data.

Governing Law and Jurisdiction: Malaysian law as the governing law, with the courts of Malaysia as the jurisdiction for disputes. For consumer contracts, mandatory dispute resolution through the Tribunal for Consumer Claims Malaysia (TTPM) should be acknowledged for claims up to RM50,000.

Amendment and Termination: The business's right to amend the Terms with notice to users, and the consequences of continued use following an amendment (deemed acceptance of updated terms under ECA 2006).

Additional compliance elements for a Terms and Conditions (Malaysia) used in Malaysia include: Under Malaysian law, the Contracts Act 1950 (Act 136) governs contractual obligations. The Companies Act 2016 (Act 777) regulates corporate entities through the Companies Commission of Malaysia (SSM). The Employment Act 1955 (Act 265) and the Department of Labour govern employment matters. The Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection Department protect personal data. The Inland Revenue Board of Malaysia (LHDN) administers tax obligations. The Industrial Court adjudicates employment disputes under the Industrial Relations Act 1967 (Act 177). Forms-legal.com provides this template as a starting point for Malaysia-compliant documentation.