← All insights Policy & Incentives

MDEC's Malaysia Digital (MD) Status & MDLR Framework 2026: The Complete Foreign Investor's Guide — RM87.4 Billion in Digital Investments, the New Three-Tier Location System, Tax Incentives, Talent Benefits and Step-by-Step Application

·19 min read
Malaysia's flagship digital economy programme has never looked more compelling for foreign investors. In 2025, the Malaysia Digital Economy Corporation (MDEC) secured a record RM87.4 billion in approved digital investments — driven by artificial intelligence, cloud computing, data centres and big data — while simultaneously overhauling the location framework that underpins the programme. If you run a tech company based in China, Taiwan, Hong Kong or Singapore and are considering Malaysia as your Southeast Asian headquarters, this guide explains every element of the Malaysia Digital (MD) Status system as it stands in mid-2026, including the brand-new MD Location Recognition (MDLR) framework, the outcome-based tax incentives with hard application deadlines, the talent benefits, and the exact steps to incorporate and apply.

Key Takeaways

  • Record RM87.4 billion in approved digital investments in 2025, expected to create over 31,000 high-value jobs — confirming Malaysia as ASEAN's leading digital FDI destination.
  • MD Status replaced MSC Malaysia on 1 July 2022. It is activity-based (operate anywhere in Malaysia) and is now held by more than 6,000 companies globally.
  • MDLR framework live from 1 January 2026: three certified location tiers (MD Hub, MD Nexus, MD Tech Zone) replace the legacy Cybercity/MDH system — optional but strategically valuable.
  • Tax incentives of 0% on IP income for up to 10 years (or 60–100% ITA on capex for 5 years) are available under the Malaysia Digital Tax Incentive — but applications close 31 December 2027.
  • Minimum entry bar is deliberately low: 2 knowledge workers at RM5,000/month, RM50,000 annual opex, RM1,000 paid-up capital — making MD Status accessible to early-stage foreign ventures.
  • Non-fiscal benefits are substantial: pre-approved foreign knowledge worker quotas, Employment Pass green-lane processing, import duty and sales tax exemption on ICT equipment, and freedom to repatriate capital under the Bill of Guarantees.

1. From MSC to Malaysia Digital: Understanding the Transformation

For nearly three decades, Malaysia's digital economy anchor programme was the Multimedia Super Corridor (MSC) Malaysia scheme, which required companies to be physically located inside designated Cybercities (like Cyberjaya or Kuala Lumpur City Centre) or Cybercentres to qualify for incentives. That location-based model served Malaysia well in the 1990s and 2000s, but by the time cloud computing, remote work and digital-native business models became the norm, it was a structural anachronism.

On 1 July 2022, the Malaysian Government retired MSC Malaysia and launched Malaysia Digital (MD) Status as its successor. The paradigm shift was fundamental: instead of asking "where is your office?" MDEC now asks "what digital activities do you carry out?" This activity-based model means a foreign-owned Sdn. Bhd. can be awarded MD Status whether it operates from a Grade-A tower in KLCC, a co-working space in Penang, or a purpose-built data-centre campus in Johor — as long as the substance of its operations involves promoted digital activities.

Existing MSC Status companies retain their status, their Bill of Guarantees protections and any approved incentives, subject to continued compliance with the original conditions. New MSC applications, however, are permanently closed. If your company is evaluating Malaysia in 2026, Malaysia Digital is the only gateway.

Why this matters for Chinese and Taiwanese investors: Under the old MSC system, setting up in a designated Cybercity could impose significant real-estate cost constraints and commuting overheads that made sense for large multinationals but not for lean regional hubs. MD Status eliminates that friction entirely, while preserving — and in several cases improving — the incentive package. A Chinese SaaS company, a Taiwanese IC-design consultancy, or a Hong Kong fintech firm can now choose their Malaysian office based on business logic, not government zoning maps.

2. The MDLR Framework: Three Tiers of Certified Digital Locations (Live from 1 January 2026)

While MD Status itself is location-agnostic, MDEC recognised that some degree of cluster-building and infrastructure certification was still necessary to grow high-value ecosystems. Following an interim deferment announced on 1 March 2025 (which temporarily suspended new Cybercity/Cybercentre and Malaysia Digital Hub applications while the new framework was designed), MDEC on 15 December 2025 announced the MD Location Recognition (MDLR) framework, which took effect on 1 January 2026.

MDLR is not a company-level status — it is a premises-level certification awarded to developers, landlords and zone operators. Under MDLR, three distinct tiers replace the legacy Cybercity/Cybercentre/MDH designations:

MDLR Tier Who It Is For Key Characteristics Best Suited For
MD Hub Developers & operators of community-focused tech spaces Dynamic spaces connecting local and global innovators; focus on community development; ideal for startups, accelerators and incubators Early-stage foreign ventures, startup studios, accelerator operators
MD Nexus Owners/managers of premium commercial or mixed-use buildings Premium business premises with sophisticated environments and advanced facilities designed for established digital investors; high-grade IT infrastructure Established MNCs, regional HQs, Global Business Services centres
MD Tech Zone Industrial/R&D zone developers and state governments Dedicated zones focused on niche, high-impact digital technology development; fosters cutting-edge advancements in emerging tech Data-centre operators, AI research campuses, semiconductor design clusters

For a foreign company choosing where to locate its Malaysian entity, the practical implication is this: locating inside an MDLR-certified premises is optional, but it is increasingly advantageous. MDLR-certified locations provide Government-certified quality assurance, access to co-location infrastructure and ecosystem partners, stronger positioning for grant applications (such as MDAG), and — particularly for capital-intensive projects like data centres — a signal of regulatory clarity that international investors prize. Companies choosing an MD Tech Zone location, for instance, are aligning with the government's highest-priority cluster development agenda, which can influence how favourably MDEC's approval committee views their overall application.

3. Record Investments in 2025: The Market Context Every Foreign Investor Should Know

The headline figure from MDEC's official 2025 annual report deserves to be understood in full context. Malaysia Digital secured RM87.4 billion in approved digital investments in 2025, driven largely by AI, big data, data centres and cloud services. This figure formed a significant portion of the RM152.9 billion approved in the information and communications sub-sector as reported by MIDA.

These investments, secured from more than 600 Malaysia Digital status companies, are expected to generate over 31,000 high-value jobs, reinforcing Malaysia's position as ASEAN's leading digital investment destination.

Breaking down the 2025 job creation by sector tells a story about where the real opportunities lie:

Sector Jobs Expected (2025 investments) Foreign Investor Relevance
Artificial Intelligence (AI) 12,600+ Highest-priority sector; aligns with Malaysia's AI Nation 2030 ambition
Global Business Services (GBS) ~9,000 Shared-service centres, BPO, finance & HR offshoring
Data Centre & Cloud Services ~2,600 Capital-intensive; ITA incentive particularly attractive
Creative Media Technology ~1,400 Extended reality, mixed reality, gaming
Internet of Things (IoT) ~1,100 Industrial IoT, smart city applications

Notably, among foreign investors, Singapore led with RM32.16 billion, followed by the United States (RM11.43 billion) and China (RM3.80 billion) in 2025. China's growing digital investment presence in Malaysia is directly relevant to readers of this guide: Chinese tech companies are increasingly recognising Malaysia as the most accessible and incentive-rich English-common-law jurisdiction in ASEAN for establishing a regional headquarters outside of Singapore.

Meanwhile, in Q2 2025 alone, digital investments under the MD initiative surged by 125%, rising from RM13.11 billion in Q1 to RM29.47 billion — a remarkable acceleration that has continued into 2026, positioning Malaysia as one of the fastest-growing digital FDI destinations globally.

4. Eligibility for MD Status: What Foreign Companies Must Satisfy

MD Status is not awarded to every tech company that applies. MDEC assesses applications against both a baseline eligibility threshold and a qualitative evaluation of the business plan's contribution to Malaysia's digital economy. Here is the complete eligibility picture for a foreign-owned entity:

4.1 Pre-Conditions: Incorporation First

A key structural requirement that catches many foreign applicants off-guard: you must incorporate a Malaysian company before applying for MD Status. Specifically, the applicant entity must be incorporated under the Companies Act 2016 and be tax-resident in Malaysia. This means that if you are a Chinese company considering MD Status, the sequence is always: incorporate a Sdn. Bhd. in Malaysia → then apply for MD Status. The foreign parent company itself cannot hold MD Status directly.

This is where our Sdn. Bhd. incorporation service becomes the critical first step — getting the legal entity in place correctly (with appropriate share structure, directors and constitution) ensures your MDEC application starts on solid footing.

4.2 Minimum Operational Requirements (Within 12 Months of Award)

4.3 Qualifying Digital Activities

MDEC maintains an official list of promoted digital activities. Core qualifying categories include:

MDEC's approval committee also has the discretion to accept activities outside these categories if they are deemed significant for Malaysia's digital ecosystem. However, applicants relying on this discretion should be prepared to demonstrate clearly how their activity contributes to national digital priorities.

4.4 Ongoing Compliance Obligations

MD Status is conditional, not permanent. Companies must fulfil the conditions in their approval letter — typically within 12 months — and maintain them thereafter. Key obligations include submitting the periodic Self-Declaration Form (SDF) to MDEC confirming continued compliance, maintaining the committed knowledge-worker headcount, and keeping the approved activity as the substance of operations. For tax incentive holders, this also means meeting the outcome commitments (investment, jobs, income thresholds) attached to the specific incentive tier. Non-compliance can result in conditions being enforced, incentives clawed back, or status revoked.

5. The Malaysia Digital Tax Incentive (MDTI): Rates, Tiers and the 2027 Deadline

The Malaysia Digital Tax Incentive (MDTI), launched on 31 May 2024 and with revised guidelines issued on 30 April 2025, is an outcome-based scheme designed to attract high-value technology investment while aligning with OECD international standards (relevant because Malaysia's largest potential investors — China, US, Singapore — all operate under Pillar Two global minimum tax rules).

The MDTI offers two investment tracks and two incentive instruments, giving companies significant flexibility:

5.1 New Investment Incentive (For Companies Starting a New Qualifying Activity)

Eligible companies may choose either:

5.2 Expansion Incentive (For Established Companies Undertaking New Activities)

Companies that have been operational for at least 36 months and wish to expand into new qualifying digital activities may apply for:

Critical deadline: 31 December 2027. Applications for both the New Investment and Expansion Incentive tracks must be submitted to MDEC by 31 December 2027. Companies that miss this window may still obtain MD Status and its non-fiscal benefits (such as 100% foreign ownership), but may not be eligible for the current tax exemption rates unless a new framework is gazetted. If you are planning to apply, the cost of delay is significant — do not leave this to 2027.

A few structural points that matter for foreign companies:

6. Non-Fiscal Benefits: The Bill of Guarantees and Talent Pipeline

Even if a foreign company cannot (or chooses not to) claim the MDTI tax incentives, the non-fiscal benefits of MD Status remain substantial and should not be undervalued. The Bill of Guarantees (BoG) provides a set of statutory commitments by the Malaysian Government to MD Status holders:

For a Chinese company considering its Malaysia market-entry strategy, the talent and capital-flow benefits deserve special attention. Malaysia's strong Mandarin-speaking engineering talent pool (particularly in Penang, KL and Johor) combined with the BoG's unrestricted capital repatriation rights makes MD Status a particularly effective vehicle for running a regional treasury and talent centre.

7. Step-by-Step Application Process: From Incorporation to MD Certificate

The following sequence applies to a foreign company establishing its Malaysian operations and applying for MD Status from scratch:

  1. Incorporate your Malaysian Sdn. Bhd. — Register with the Companies Commission of Malaysia (SSM) via the CRS portal. For a foreign-owned entity, this typically involves appointing at least one locally resident director, preparing a constitution (optional but recommended), and paying SSM registration fees. Using a professional firm for this step saves 2–4 weeks. Our Sdn. Bhd. incorporation service covers the full SSM filing, constitution drafting and post-incorporation secretarial setup.
  2. Set up your ESD (Expatriate Services Division) account — If you intend to employ foreign knowledge workers, you will need an ESD account with the Immigration Department before making Employment Pass applications. MDEC's eXpats Service Centre integrates with this system for MD companies.
  3. Prepare your MD Status application package — This includes: company profile and incorporation documents; detailed business plan describing the proposed qualifying digital activities; financial projections (minimum 3 years); proposed knowledge worker headcount and salary structure; and any supporting evidence of the technology or IP being deployed.
  4. Submit via the Malaysia Digital portal — Applications are made online at malaysiadigital.mdec.my. MDEC completes its review within 14 working days of receiving a complete application, after which the MD Consultative Committee (MD-CC) deliberates. Realistically, allow 4–8 weeks end-to-end once document preparation, preliminary checks and any clarification rounds are counted.
  5. Accept the award letter and receive your MD e-Certificate — Upon approval, MDEC issues a decision letter with specific conditions. You must formally accept the conditions. The MD Status e-Certificate is then issued digitally.
  6. Satisfy post-award conditions within 12 months — Hire your knowledge workers, commence operations, incur the required opex, and ensure your paid-up capital is in place.
  7. Apply for the MD Tax Incentive (MDTI) separately — MD Status and the MDTI are two separate applications. Once MD Status is secured, eligible companies submit the MDTI application (also via MDEC) before 31 December 2027. Engaging a tax adviser at this stage is strongly recommended given the "clean invoice" rule and the 24-month commencement window for the RTR.
  8. Submit periodic Self-Declaration Forms (SDF) — On an ongoing basis, maintain compliance by filing the SDF with MDEC to confirm that conditions continue to be met.

8. Worked Example: A Shenzhen AI-SaaS Company Enters Malaysia via MD Status

To make the above framework concrete, consider the following scenario:

Background: ShenTech AI Sdn. Bhd. is newly incorporated as the Malaysian subsidiary of a Shenzhen-based AI software company. The parent company's core product is an AI-powered quality-inspection system for manufacturing clients. The Malaysian entity will act as regional HQ for Southeast Asia, running software development, sales, and customer onboarding. Paid-up capital: RM100,000.

Step 1 — Incorporation (Week 1–2): The parent company uses ONEKEY BIZ to incorporate the Sdn. Bhd. within 3–5 working days via the SSM CRS portal. A Malaysian resident director is appointed; the parent company holds 100% of shares.

Step 2 — MD Status Application (Month 1–2): The business plan highlights qualifying activities: AI and Big Data Analytics (core product), Cloud Services (delivery model). The company proposes to hire 4 knowledge workers (2 Malaysian software engineers at RM6,000/month, 1 Chinese expat AI specialist, 1 product manager) and incur RM180,000 in first-year opex. MDEC approves in week 6. The clean-invoice rule is easily satisfied because no Malaysian sales have been invoiced yet.

Step 3 — MDTI Application (Month 2): Immediately after MD Status approval, ShenTech applies for the New Investment Incentive. Given its IP-intensive model, it elects the RTR track: 0% on qualifying IP income (software licence revenue generated from Malaysian-developed IP), 10% on non-IP income (service fees). The incentive period begins from the MDEC-approved commencement year of assessment. Over a 10-year horizon, this represents a saving against Malaysia's standard 24% corporate tax rate.

Step 4 — Talent and Office (Month 3–4): Using the pre-approved expatriate quota, the Chinese AI specialist's Employment Pass is processed via the MDEC eXpats Service Centre under the Green Lane track within 4 weeks. The office is in an MD Nexus-certified building in KL — chosen to strengthen grant eligibility and signal credibility to Malaysian enterprise clients.

Outcome: Within 4 months of landing, ShenTech has a fully compliant Malaysian Sdn. Bhd. with MD Status, a 10-year reduced tax rate, an expatriate knowledge worker on a valid Employment Pass, and exemption from import duty on its AI-server hardware. Total professional service cost for incorporation plus MD Status assistance: approximately RM15,000–25,000. Compared to the tax saving over 10 years, the ROI is overwhelming.

9. Common Pitfalls and How to Avoid Them

10. The Data Centre Opportunity: Why Malaysia's Infrastructure Momentum Matters

For readers from China, Taiwan or Singapore considering a data-centre or cloud-infrastructure play in Malaysia, the investment context in 2026 is exceptional. In Q2 2025 alone, the Data Centre and Cloud vertical contributed RM30.95 billion of approved digital investment, cementing data centres as the single largest sector by capital commitment under the Malaysia Digital programme.

Several macro factors drive this:

What to Do Next

Malaysia Digital Status is the most comprehensive and accessible digital investment framework in Southeast Asia. With a RM87.4-billion-strong track record in 2025, a rejuvenated location ecosystem under MDLR, outcome-based tax incentives with a hard 2027 application deadline, and a talent pipeline supercharged by Green Lane Employment Pass processing, the cost of inaction for any foreign tech company evaluating ASEAN is rising every quarter.

The correct sequence is: incorporate first, apply for MD Status second, secure the tax incentive third. Every step builds on the previous one, and every step has consequences if done in the wrong order or with poor documentation.

ONEKEY BIZ handles the entire Malaysia market-entry process for foreign tech companies — from SSM incorporation and company secretarial services through to MDEC application support, Employment Pass facilitation and ongoing accounting compliance. Start with our Sdn. Bhd. incorporation service to get your legal entity in place, then contact our team for a free briefing on your specific MD Status and MDTI application strategy. Time matters: the 2027 tax incentive deadline is closer than it appears.

]]>

Frequently asked questions

What is Malaysia Digital (MD) Status and who replaced MSC Malaysia?

Malaysia Digital (MD) Status is the successor to the legacy MSC Malaysia (Multimedia Super Corridor) programme, which was retired on 1 July 2022. Managed by the Malaysia Digital Economy Corporation (MDEC) under the Ministry of Digital, MD Status is granted to companies that undertake promoted digital activities in Malaysia — such as AI, cloud services, cybersecurity, fintech, IoT, blockchain and drone technology. Unlike MSC, MD Status is activity-based: companies can operate from anywhere in Malaysia, not just designated Cybercities. As of early 2026, more than 6,000 companies hold MD Status.

What are the minimum requirements to qualify for MD Status as a foreign company in 2026?

A foreign company applying for MD Status must first incorporate a Malaysian Sdn. Bhd. (or be registered as a locally resident entity). Core post-award conditions include: (1) at least two full-time knowledge workers earning an average monthly base salary of RM5,000 or more; (2) minimum annual operating expenditure of RM50,000 on approved activities; and (3) minimum paid-up capital of RM1,000. These conditions must be satisfied within 12 months of the award date. Companies must also submit a periodic Self-Declaration Form (SDF) to MDEC to confirm continued compliance.

What tax incentives does MDEC offer under the Malaysia Digital Tax Incentive (MDTI) scheme?

MDEC's Malaysia Digital Tax Incentive (MDTI), launched 31 May 2024, has two tracks. The New Investment Incentive offers either: (a) a Reduced Tax Rate (RTR) of 0% on qualifying IP income (modified nexus approach) and 5% or 10% on non-IP income for up to 10 years; or (b) an Investment Tax Allowance (ITA) of 60% or 100% on qualifying capital expenditure offset against up to 100% of statutory income for up to 5 years. The Expansion Incentive (for companies operational for at least 36 months) offers a 15% RTR for 5 years or a 30%–60% ITA for 5 years. Applications for both must be submitted by 31 December 2027.

What is the new MDLR framework and why does it matter for my choice of office location?

Announced on 15 December 2025 and effective from 1 January 2026, the MD Location Recognition (MDLR) framework replaces the old Cybercity/Cybercentre/Malaysia Digital Hub (MDH) system. It introduces three certified location tiers: MD Hub (vibrant community spaces for startups and accelerators), MD Nexus (premium business premises for established digital companies), and MD Tech Zone (niche, high-impact R&D and technology clusters). Locating your office within an MDLR-certified location is optional — you can still hold MD Status anywhere in Malaysia — but doing so unlocks superior infrastructure, access to co-location grants, better networking, and can strengthen your overall application profile.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.

How ONEKEY BIZ can help

Need help navigating this in Malaysia?

Our Mandarin- and English-speaking consultants handle the whole process — fixed quotes, zero hidden fees.