Business Licences in Malaysia: Which Approvals Do You Need?

Define the operation before searching for licences

Build a short operating brief rather than asking only whether a company needs a “business licence”. Include the entity that will contract with customers, its actual services or production process, the operating address and the planned start of each activity. Separate what the business will do itself from work purchased from a licensed supplier; your own role is the starting point for the enquiry.

Capture five facts that can change the approval route:

• Activity: what you make, sell, install, advise on or otherwise supply, including secondary services.
• Location: the state, city or district, exact premises, customer access, storage, production and proposed signs.
• Goods: product description, whether goods cross the border, and the intended use.
• People: who performs the work, whether professional qualifications matter, and whether expatriates will work in Malaysia.
• Ownership: the applicant entity, shareholders and any proposed foreign participation.

The official MalaysiaBiz licensing search uses business activity and state, city or district to identify licensing information. Review each result’s agency, conditions, validity and application details. Save the search inputs as well as the results: changing a location or activity can change the enquiry. A portal result identifies a possible requirement; it does not approve the applicant or the site.

Use the activity you actually carry out when describing the business. The distinction between a classification and permission is also relevant when selecting activity codes for the proposed operation ; a code alone does not settle sector or premises eligibility.

Separate SSM establishment from activity approval

SSM incorporation establishes a company; an activity approval concerns the work it is permitted to undertake under the relevant regulatory regime. For a local company under the Companies Act 2016, SSM’s standard incorporation output is a registration notice, while a certificate is supplied on a separate application. Neither document should be used as the completion record for an unrelated operating licence. SSM explains these outputs in its company establishment requirements .

The entity, promoters, directors and incorporation particulars belong in the underlying company formation in Malaysia workstream. The licensing enquiry then needs to identify whether the operating activity requires a sector regulator’s approval, a professional registration or an approval held by a qualified individual or practice. Do not treat an individual’s qualification as proof that the proposed company or premises is approved.

Manufacturing shows why the exact trigger matters

MIDA states that manufacturing companies with shareholders’ funds of MYR 2.5 million or above, or 75 or more full-time paid employees must apply for a manufacturing licence, with applications submitted to MIDA for MITI approval. Its approval and licensing explanation distinguishes shareholders’ funds from paid-up capital: the measure also includes relevant reserves and the profit and loss appropriation balance, subject to the stated exclusions. A paid-up-capital figure alone therefore cannot answer the threshold question.

MIDA’s manufacturing licence application guideline states that a company below both thresholds may apply online for exemption through ICA10. At exactly MYR 2.5 million or 75 employees, follow the licence trigger rather than treating the business as below threshold. A manufacturing licence and an exemption confirmation are different outputs; neither resolves the separate premises enquiry. These are screening rules, not a statement that meeting a threshold guarantees approval.

Check premises and signs with the correct local authority

Premises approval is tied to the proposed place and use, while signboard or advertising permission concerns the display. Identify the Pihak Berkuasa Tempatan, or local authority, for the actual site. A postal address described as Kuala Lumpur is not, by itself, enough to select the authority; use the authority’s boundary information and the property’s assessment records when checking the address.

For premises within its administrative area, DBKL’s licensing department describes a composite licence as combining a premises licence with premises signboard advertising permission. Its guidance directs applicants to eLesen and identifies planning, building alterations and fire-safety compliance among matters that can affect premises approval. It also states that a licence is issued by premises address and cannot simply be moved to another location. These are Kuala Lumpur examples; another council’s forms, conditions and exemptions must be checked independently.

Before signing an unconditional lease or ordering signs, ask whether the proposed use is permitted at that site and which supporting clearances the particular application requires. Ask for the current document checklist, including the accepted current company records; a webpage listing historical company forms does not justify inventing a new requirement to recreate obsolete forms.

A registered-office address does not establish permission to operate from that address. Record whether the space will be used for administration, customer visits, storage or production. The same address description can conceal materially different uses. Home-based or online operations need their own location and activity assessment rather than an assumed exemption.

Keep local scope explicit for Sabah and Sarawak as well as Peninsular Malaysia. The DBKL example supplies no permission for a site elsewhere. The activity, site and additional triggers must be considered together before the approval file can support a launch decision.

Test goods, staffing and ownership separately

Additional workstreams arise from the goods, people and ownership in the operating brief. They can coexist with an activity licence and council permission, so receiving one approval should not close the other checks. Assign each enquiry to the relevant authority and retain its own decision record.

Goods crossing the border

Royal Malaysian Customs requires importers or their agents to check goods against the Customs prohibition and restriction rules before importation and comply with applicable requirements. Start with the actual product and classification, then identify any permit, approving agency or prohibition that applies under the current order and amendments. The phrase “trading company” cannot establish the treatment of every product. Preserve any required product or shipment approval separately from the company’s establishment records.

People performing the work

The ESD Employment Pass explanation distinguishes company eligibility, approval for an expatriate position and issuance of the individual pass. It states that the Employment Pass described there is valid only in Peninsular Malaysia and that the holder may work only for the company named on it. Shareholding or a director appointment cannot substitute for that permission. For work in Sabah or Sarawak, determine the applicable immigration route separately.

Also assign an applicability check for employer registration, payroll and tax obligations when staffing begins. These are operational compliance workstreams; they are not evidence that a sector licence or a personal work permission has been granted. The precise obligations need the worker and employment facts.

Ownership conditions attached to the activity

MIDA’s equity policy explanation states that the Companies Act 2016 imposes no equity conditions on Malaysian incorporated companies, while specific approvals, operating licences, permits or registrations may impose their own conditions. Establish the proposed ownership before assessing the relevant approval. A general ability to hold shares is not evidence that the proposed activity satisfies its licensing conditions.

Build an approval register with a proof endpoint

Use the following register to turn enquiries into decisions. It is a working method for matching verified rules to your facts, rather than a statutory form or a list of licences every business must obtain. Add an item only when its trigger applies, and retain the reason when an enquiry shows that it does not.

Add a responsible person, application reference, dependency, status and review date to each applicable row. Distinguish research completed, application submitted, additional information requested, approval issued and conditions fulfilled. An application receipt is not the same as permission to begin the activity. If a regulator allows an interim or conditional operation, retain the actual written scope and conditions supporting that position.

Research activity eligibility and site suitability before making commitments that would be expensive to reverse. Prepare compatible applications in parallel when their checklists allow it; submit dependent applications once the required earlier output exists. No single end-to-end processing period covers these different authorities, inspections and supporting documents. Build the launch plan around the last necessary approval and condition for the operation you intend to start.

Resolve missing approvals and keep their scope current

When a requirement remains unresolved, identify the exact missing fact or document. An unclear activity description needs clarification of the proposed work; an unsuitable site needs a location or permitted-use solution; an incomplete application needs the requested evidence. Refiling the same incomplete package does not settle the underlying issue. Record the authority’s question and assign a specific response.

Before relying on an approval, compare its holder, activity, address, products, people, conditions and validity with the current plan. Treat a mismatch as a scope question to resolve with the issuing authority, not as an administrative detail. Keep the affected activity out of the launch scope until the required position is established.

Create a change review whenever you add a service, move premises, install a new sign, introduce a new imported product, change the relevant ownership or appoint a person who needs work permission. Check the applicable amendment, new application or renewal route rather than assuming that updating SSM particulars updates every other authority’s record. Retain the issued document and decision correspondence together, with reminders based on its actual expiry and conditions.

Release only the business operation your approvals cover

Your launch decision should follow the scope of the evidence. Proceed with a planned activity only after the required entity, activity, site and triggered goods or people workstreams have reached their proper completion points and the relevant pre-operation conditions are met. An approval for one part of the plan cannot establish permission for an uncovered part.

If the authority, applicant eligibility or permitted scope remains uncertain, make that the next enquiry before committing to the affected operation. Send the same concise operating brief to the relevant decision-makers so that their answers concern the same business. The useful result is a documented approval register that matches what will happen on the first operating day.