Digital Asset Agreement (Malaysia)

A Digital Asset Agreement in Malaysia sets out the rights and obligations the parties agree to be bound by.

The SC issued its Guidelines on Digital Assets in 2020 and updated them in 2022, classifying digital assets as either digital securities (regulated under CMSA 2007 as capital market products) or digital currencies traded through registered DAX operators. Digital Asset Exchange operators in Malaysia must be registered with the SC under Section 76 of the CMSA 2007 — registered DAX operators include Luno Malaysia Sdn Bhd, MX Global Sdn Bhd, and Tokenize Technology (M) Sdn Bhd.

Bank Negara Malaysia (BNM) does not recognise cryptocurrencies as legal tender in Malaysia — Malaysian Ringgit (RM) remains the only legal tender under the Central Bank of Malaysia Act 2009. However, digital assets are lawfully traded and held as investment instruments under the SC's regulatory framework. Under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA 2001), SC-registered DAX operators are reporting institutions required to conduct customer due diligence (KYC) and file Suspicious Transaction Reports (STRs) with BNM's Financial Intelligence and Enforcement Department (FIED).

A Digital Asset Agreement for a private off-exchange transaction — such as a direct sale of Bitcoin between two parties without using a registered DAX — is governed by the Contracts Act 1950 as a contract for the sale of property. Such transactions should be documented to establish the agreed price, quantity, and delivery mechanism (blockchain wallet transfer), and to provide evidence of ownership transfer for tax reporting purposes under the Income Tax Act 1967.

The Inland Revenue Board of Malaysia (LHDN) has clarified that gains from trading digital assets are subject to income tax under the Income Tax Act 1967 where the activity amounts to a trade or business — assessed based on the badges of trade, including frequency of transactions, holding period, and profit motive. Capital gains from occasional disposal of digital assets by non-traders are not currently subject to tax in Malaysia, as Malaysia does not impose a general capital gains tax on digital assets.

The legal framework governing the Digital Asset Agreement (Malaysia) in Malaysia draws on several key statutes and regulatory bodies. Under Malaysian law, the Contracts Act 1950 (Act 136) governs contractual obligations. The Companies Act 2016 (Act 777) regulates corporate entities through the Companies Commission of Malaysia (SSM). The Employment Act 1955 (Act 265) and the Department of Labour govern employment matters. The Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection Department protect personal data. The Inland Revenue Board of Malaysia (LHDN) administers tax obligations. The Industrial Court adjudicates employment disputes under the Industrial Relations Act 1967 (Act 177). Parties executing a Digital Asset Agreement (Malaysia) in Malaysia should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Financial Services Act 2013 (Act 758) sets the foundational requirements.

A Digital Asset Agreement in Malaysia is needed whenever parties enter into a transaction involving digital assets and require a formal documented record of the agreed terms.

A Digital Asset Agreement is required when two parties agree to a private sale or exchange of Bitcoin, Ethereum, or other cryptocurrencies outside a registered DAX. The agreement documents the quantity of digital assets, the agreed price in RM, the exchange rate reference, and the blockchain wallet addresses for transfer.

A Digital Asset Agreement is needed when an investor subscribes for digital tokens issued through an Initial Exchange Offering (IEO) conducted through an SC-registered IEO operator under the SC's Guidelines on Digital Assets. The agreement documents the token type, quantity, issue price, and the rights attached to the tokens.

A Digital Asset Agreement is required when a company provides digital asset custody services — holding private keys on behalf of clients — and must document the terms of custody, security arrangements, and the client's rights over the custodied assets.

A Digital Asset Agreement is needed when a business accepts digital assets as payment for goods or services and requires a written record of the agreed exchange rate, the digital asset accepted, and the wallet address to which payment is to be made.

A Digital Asset Agreement is required when parties engage in a digital asset swap — exchanging one cryptocurrency for another at an agreed rate — to document the agreed terms and establish the cost base of each party's resulting digital asset holding for income tax purposes under the Income Tax Act 1967.

Parties in Malaysia should prepare a Digital Asset Agreement (Malaysia) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Under Malaysian law, the Contracts Act 1950 (Act 136) governs contractual obligations. The Companies Act 2016 (Act 777) regulates corporate entities through the Companies Commission of Malaysia (SSM). The Employment Act 1955 (Act 265) and the Department of Labour govern employment matters. The Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection Department protect personal data. The Inland Revenue Board of Malaysia (LHDN) administers tax obligations. The Industrial Court adjudicates employment disputes under the Industrial Relations Act 1967 (Act 177). Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution.

A valid Digital Asset Agreement in Malaysia must contain the following essential elements. Party Identification: Full legal names, NRIC/passport numbers or SSM registration numbers, and wallet addresses (public keys) of both parties. KYC information should be documented consistent with AMLA 2001 requirements where the transaction meets the threshold for due diligence by a reporting institution. Digital Asset Description: The specific digital asset or cryptocurrency involved — including the full name (e.g., Bitcoin), ticker symbol (e.g., BTC), and the blockchain network (e.g., Bitcoin mainnet, Ethereum ERC-20). For digital tokens, include the token contract address on the applicable blockchain. Quantity and Price: The quantity of digital assets to be transferred, the agreed price in Malaysian Ringgit (RM) or other currency, and the reference exchange rate source (e.g., CoinGecko, Binance spot price) at the time of agreement. Since digital asset prices are highly volatile, the agreement should specify whether the price is fixed at the time of agreement or at the time of transfer. Representations and Warranties: Each party's representation that they are the legal and beneficial owner of the assets being transferred, free from encumbrances; that the transaction does not involve proceeds of crime under AMLA 2001; and that they have complied with applicable tax reporting obligations under the Income Tax Act 1967. Risk Acknowledgement: An acknowledgement by both parties of the inherent risks of digital asset transactions — price volatility, blockchain network failures, cybersecurity risks including wallet hacking, and the absence of BNM deposit protection (PIDM coverage does not extend to digital assets). Governing Law: Malaysian law governs the agreement under the Contracts Act 1950. The agreement should acknowledge the SC's regulatory jurisdiction over digital securities under the CMSA 2007 and the AMLA 2001 obligations of any reporting institution involved. Additional compliance elements for a Digital Asset Agreement (Malaysia) used in Malaysia include: Under Malaysian law, the Contracts Act 1950 (Act 136) governs contractual obligations. The Companies Act 2016 (Act 777) regulates corporate entities through the Companies Commission of Malaysia (SSM). The Employment Act 1955 (Act 265) and the Department of Labour govern employment matters. The Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection Department protect personal data. The Inland Revenue Board of Malaysia (LHDN) administers tax obligations. The Industrial Court adjudicates employment disputes under the Industrial Relations Act 1967 (Act 177). Forms-legal.com provides this template as a starting point for Malaysia-compliant documentation.