MDEC Malaysia Digital (MD) Status, MDLR Framework & Data-Centre Investment 2026: The Complete Guide for Foreign Tech Companies — Activity-Based Eligibility, Tax Incentives, Location Recognition and the RM 87.4 Billion Opportunity

Malaysia has quietly engineered one of Southeast Asia's most powerful foreign-tech-investment frameworks. Since July 2022, the legacy MSC Malaysia Status has been rebranded and fundamentally restructured as Malaysia Digital (MD) Status, managed by the Malaysia Digital Economy Corporation (MDEC). In the eighteen months from January 2025 to mid-2026, three seismic updates have landed almost simultaneously: RM 87.4 billion in approved digital investments recorded in 2025, a brand-new MD Location Recognition (MDLR) framework effective 1 January 2026, and an outcome-based MD Tax Incentive scheme that remains open for applications until 31 December 2027. For a foreign tech company from China, Taiwan, Hong Kong or Singapore looking at Malaysia as its regional base, understanding — and acting on — this trifecta of changes may be the single highest-leverage decision of 2026.

From MSC to Malaysia Digital: A Decade of Structural Evolution

To understand why MD Status matters so much in 2026, it helps to trace the policy arc. The Multimedia Super Corridor (MSC) was established in 1996 as a geographically delimited zone — companies had to be physically based in approved buildings in Cyberjaya, Putrajaya or designated Cybercities to benefit from tax breaks and foreign-ownership freedoms. The model worked for its era: by December 2022, it had attracted RM 485 billion in cumulative investments and created over 223,000 high-value jobs.

But by 2022, the location-based model was a constraint rather than an asset. AI companies, SaaS firms, and data-platform businesses do not need a particular postcode; they need talent, bandwidth, regulatory certainty and tax efficiency. On 22 July 2022, the Malaysian government officially rebranded MSC Malaysia as Malaysia Digital and shifted to an activity-based eligibility model. The move was more than cosmetic: it removed the requirement to operate from a designated building, broadened the list of qualifying activities beyond ICT into AI, blockchain, advanced connectivity and creative-media technology, and introduced a revamped Bill of Guarantees (BoGs) framework. As of April 2025, more than 6,000 companies have been awarded MD Status, reflecting the programme's growing reach.

The RM 87.4 Billion Signal: Why 2026 Is a Pivot Year

At the Data Centre and Cloud Infrastructure Summit 2026 in May, MDEC's Vice President of Digital Adoption, Wan Murdani Wan Mohamad, disclosed that Malaysia's approved digital investments reached RM 87.4 billion in 2025, driven largely by AI, big data, data centres and cloud services. Those investments are expected to support the creation of 31,000 high-value jobs and strengthen Malaysia's talent ecosystem. For context, Malaysia's data centre market alone was valued at USD 6.14 billion in 2025 and is projected to reach USD 11.40 billion by 2031, a compound annual growth rate of approximately 10.86%.

This is not theoretical demand. In November 2025, Microsoft announced plans for a second cloud region (Southeast Asia 3) in Johor. Global hyperscalers, regional operators, and Chinese tech giants are all building in Malaysia. China Unicom, for example, was awarded MD Status in February 2026, with plans to build AI-as-a-Service, smart-city analytics and intelligent-energy-monitoring solutions from Malaysia as a regional hub. Malaysia's attractiveness to investors from China, Hong Kong SAR, Singapore, the Netherlands and the United States is explicitly cited by MDEC as part of the country's strategic digital positioning.

The practical implication for a foreign company from Greater China or Singapore: the window of opportunity to establish in Malaysia before the market matures — and before the 2027 tax-incentive application deadline closes — is now. Waiting means paying standard corporate tax rates rather than the 0%/5%/10% MD incentive rates.

MD Status Eligibility: What Every Foreign Company Must Know

MD Status is awarded by MDEC's Malaysia Digital Coordination Committee (MD-CC). The eligibility criteria are refreshingly streamlined compared to the old MSC regime, but there are important traps for foreign applicants to avoid.

Incorporation Prerequisite

The single most important structural requirement: a company must be incorporated under the Companies Act 2016 and resident in Malaysia. A foreign holding company, branch office, or representative office does not qualify. This means every foreign tech firm must first set up a Malaysian private limited company (Sdn Bhd) before submitting an MD Status application. This is why ONEKEY BIZ's Sdn Bhd incorporation service is often the first step foreign clients from China and Taiwan take before engaging MDEC.

Qualifying Activities

The company must propose to carry out one or more of MDEC's listed MD Approved Activities. The key categories for most foreign tech companies include:

• Artificial Intelligence (AI) and/or Big Data Analytics (BDA) — the single most popular category in 2025–2026
• Internet of Things (IoT)
• Cybersecurity
• Cloud services
• Blockchain
• Drone technology
• Creative media technology (including extended reality / mixed reality)
• Integrated circuit design with embedded software
• Robotics and automation
• Advanced network connectivity and telecommunication technology

MDEC's Approval Committee also retains discretion to accept activities outside these listed categories if deemed significant for Malaysia's digital ecosystem. This flexibility is important for companies in emerging fields such as quantum computing, green-tech data processing, or AI-enabled biotech.

Post-Award Compliance Conditions (12-Month Window)

Upon receiving MD Status, a company must satisfy the following operational conditions within 12 months of the award date:

• Commence operations and undertake the approved MD activities in Malaysia
• Employ at least 2 full-time employees (knowledge workers) in MD-approved roles, each earning an average monthly base salary of at least RM 5,000
• Incur a minimum annual operating expenditure of RM 50,000 for MD activities
• Maintain a minimum paid-up capital of RM 1,000

MD Status is perpetual — there is no expiry date — but companies must submit an annual Self-Declaration Form (SDF), verified by an independent external auditor, to demonstrate ongoing compliance with investment and headcount targets. Failure to comply risks suspension or revocation of MD Status, which would in turn disrupt any associated tax incentive.

The MD Tax Incentive: A Deep Dive into the Numbers

Launched on 31 May 2024 and designed to align with OECD international standards, the MD Tax Incentive is an outcome-based scheme — meaning companies must make committed investment and employment pledges in order to unlock the rates. It is divided into two categories: New Investment and Expansion.

Important rules: A company can only choose either RTR or ITA — not both. The ITA option is particularly attractive for capital-intensive businesses such as data centres and cloud infrastructure operators, where large upfront hardware and construction costs can be written off against taxable income in full. The 0% RTR on IP income is powerful for software firms, IP-heavy AI platform companies, and regional holding structures that generate licensing revenue from Malaysian-developed intellectual property.

Who Qualifies for the Tax Incentive?

To qualify for the New Investment Incentive, a company must:

• Be incorporated under the Companies Act 2016 and resident in Malaysia
• Hold a valid MD Status (MDEC approval is a prerequisite)
• Have a minimum paid-up capital of RM 50,000
• Not have issued any sales invoice for the qualifying activity in Malaysia prior to the date of application submission (or, if the company has 60% or more Malaysian equity ownership, not have issued any invoice more than 12 months prior)
• Not have already been granted another Malaysian government tax incentive for the same qualifying activity

The application processing fee is approximately RM 1,080 (inclusive of SST) for New Investment applications. Applications that are registered but for which payment and submission are not completed within 6 months will be officially closed.

The MDLR Framework: Malaysia's New Geography of Digital Excellence

Effective 1 January 2026, MDEC introduced the MD Location Recognition (MDLR) framework — announced on 15 December 2025 — replacing the former MSC Cybercity/Cybercentre and Malaysia Digital Hub (MDH) designations. MDLR does not change where an MD Status company can operate (it can still be anywhere in Malaysia) but it changes what additional benefits are available based on location choice.

The framework is explicitly designed to "future-proof Malaysia's digital ecosystem by ensuring businesses, innovators, and communities operate within environments that enable sustainable growth." In practice, MDLR is also a demand-side signal: it tells the real-estate, infrastructure and venture-capital communities exactly which locations the government considers the highest-quality digital zones — helping coordinate private investment and infrastructure development.

The Three MDLR Tiers

Cyberjaya remains the most mature MD Tech Zone-aligned location in Malaysia, with over 22 existing data centres and 9 more under construction. Johor (particularly the Iskandar Development Region) is emerging as the second major hub, driven by its proximity to Singapore and significant hyperscaler interest. The Malaysian government promotes Green Data Centre Guidelines under MDEC, encouraging operators to implement energy-efficient infrastructure and sustainable cooling solutions. Data centres above a certain scale are also required to undergo Environmental Impact Assessments (EIA).

The Malaysia Digital Bill of Guarantees: Non-Fiscal Benefits That Matter

Beyond the tax incentive, MD Status companies benefit from the Malaysia Digital Bill of Guarantees (BoGs) — a set of 10 government-to-investor commitments that provide operating certainty. The most commercially significant for foreign companies include:

• 100% foreign ownership permitted — no mandatory local equity partner required for MD-approved activities, even in sectors where the foreign equity cap would otherwise apply
• Freedom to source capital globally — MD companies can raise and borrow funds internationally without the standard foreign exchange restrictions that apply to non-MD companies under BNM rules
• Repatriation of profits, capital and dividends in foreign currency, removing transfer-risk concerns for international treasuries
• Facilitated foreign knowledge worker (FKW) quotas — MD Status companies enjoy pre-approved quotas for hiring international technical talent through MDEC's eXpats Service Centre, with Employment Pass applications processed on a Green Lane basis (this became especially relevant after Malaysia's Employment Pass salary threshold revisions effective 1 June 2026)
• Import duty and sales tax exemptions on multimedia/ICT equipment directly used in approved MD activities
• Access to Malaysia Digital Acceleration Grant (MDAG) — up to RM 5 million in co-funding on a 70:30 matching model for commercialisation and expansion activities

Step-by-Step: How a Foreign Company Applies for MD Status in 2026

The MD Status application is handled entirely online through MDEC's Malaysia Digital portal. Here is the practical sequence:

1. Incorporate a Malaysian Sdn Bhd — This is non-negotiable. You must have a Malaysian company before you can apply. The standard route is a wholly-owned foreign subsidiary under the Companies Act 2016. ONEKEY BIZ's Sdn Bhd incorporation service covers the SSM registration, statutory documents, company secretary appointment, and initial share structure — typically completable within 1–3 business days for straightforward cases.
2. Define your qualifying MD activities — Review MDEC's list of Approved Activities and map your core business to one or more categories. If your activity is borderline, request a pre-application consultation at clic@mdec.com.my or call 1-800-88-8338 before formally applying.
3. Register on the Malaysia Digital portal — Navigate to malaysiadigital.mdec.my and create a company account. You will need your SSM Company Profile (printout), incorporation documents, and details of the proposed MD activities.
4. Pay the processing fee and submit — The processing fee for a standard MD Status application is approximately RM 1,080 (inclusive of SST). Payment and submission must be completed within 6 months of registration; the application closes automatically if this is not done.
5. MD-CC Evaluation — The application is reviewed by MDEC and presented to the Malaysia Digital Coordination Committee (MD-CC) for consideration and approval. MDEC issues the decision letter (approval or rejection) to the company.
6. Accept and receive e-Certificate — Upon acceptance of the approval letter, MDEC issues the MD Status e-Certificate.
7. Meet 12-month operational conditions — Hire at least 2 qualifying knowledge workers (RM 5,000/month minimum base salary each), incur RM 50,000 annual operating expenditure, and commence approved activities.
8. Apply for the MD Tax Incentive (separate application) — MD Status is a prerequisite but does not automatically confer the tax incentive. The tax incentive requires a separate application via the same portal, with the processing fee of approximately RM 1,080 (New Investment) or RM 2,160 (Expansion, inclusive of SST). Applications close 31 December 2027.
9. Annual self-declaration (SDF) — Each year, submit the Self-Declaration Form verified by an independent external auditor to maintain MD Status and associated benefits.

Worked Scenario: A Chinese AI SaaS Company Sets Up in Malaysia

To make this concrete, consider a hypothetical Chinese AI-SaaS company — let's call it DataVision Technology (Shenzhen) — that wants to establish a Southeast Asian regional headquarters in Malaysia to serve Singapore, Thailand, Indonesia and Vietnam clients while benefiting from Malaysian tax incentives.

Step 1 — Entity setup (Month 1): DataVision incorporates a wholly owned Malaysian subsidiary, DataVision Malaysia Sdn Bhd, with RM 500,000 paid-up capital. The company is incorporated with AI-related objects in its Memorandum and Articles of Association. ONEKEY BIZ handles the SSM registration and initial company secretarial setup.

Step 2 — MD Status application (Month 1–2): DataVision applies for MD Status, citing AI/BDA and Cloud Services as its approved activities. It prepares a business plan outlining its plans to develop AI models for manufacturing quality control (a key growth sector in Malaysia under NIMP 2030). The application is submitted with the RM 1,080 fee. MD-CC approves the application within 4–8 weeks.

Step 3 — Tax incentive application (Month 2–3): Immediately after receiving MD Status, DataVision applies for the New Investment RTR at 0% on IP income and 10% on non-IP income for 10 years. It commits to hiring 15 AI engineers (all earning above RM 5,000/month) and incurring RM 2 million in qualifying capex for GPU infrastructure over 5 years. The separate tax incentive application is submitted with another RM 1,080 fee.

Step 4 — Operational ramp (Months 3–12): DataVision leases space in a Cyberjaya MD Nexus-recognised building, giving it government-endorsed credibility with Malaysian enterprise clients. It engages the MDEC eXpats Service Centre to apply for Employment Passes for 3 senior engineers from China under the Green Lane quota. Within 12 months, it has 12 employees (exceeding the 2-person minimum), RM 1.2 million in operating expenditure, and RM 800,000 in IP-based SaaS licensing revenue on which it pays 0% corporate tax.

The strategic outcome: DataVision has established a fully-owned Malaysian entity, secured 10 years of 0% tax on its core IP revenue stream, obtained Employment Passes for key personnel without needing to navigate Jabatan Imigresen's general quota system, and positioned itself in an internationally recognised digital cluster — all within 12 months of the initial decision to enter Malaysia.

Common Mistakes and Pitfalls for Foreign Applicants

• Applying before incorporating a local entity. Foreign companies sometimes assume they can apply for MD Status via a parent entity or branch. They cannot. The Malaysian Sdn Bhd must be set up first.
• Conflating MD Status with the tax incentive. MD Status and the MD Tax Incentive are two separate applications, two separate fees, and two separate evaluation processes. Many companies receive MD Status but fail to apply for the tax incentive before the 2027 deadline — or assume the tax incentive is automatic.
• Choosing RTR when ITA would be more valuable (or vice versa). For capital-intensive businesses (data centres, cloud infra, hardware-intensive AI training), ITA — which allows 100% of qualifying capital expenditure to be offset against 100% of statutory income — will almost always generate more tax savings than the RTR in the early years when income is lower and capex is highest. For SaaS or IP-licensing businesses with low capex and high IP-based income, the 0% RTR on IP income is typically superior. Model both scenarios before committing.
• Missing the SDF deadline. MD Status is perpetual but compliance-contingent. Failure to submit the annual Self-Declaration Form on time can result in the status being suspended, which triggers a cascade — disrupting the tax incentive, Employment Pass quotas, and import duty exemptions simultaneously.
• Underestimating knowledge worker salary requirements. The RM 5,000/month minimum base salary for knowledge workers is a floor, not a ceiling — and it applies per employee. Companies hiring junior technicians or administrative staff to meet the headcount requirement (rather than genuine knowledge workers in MD-approved roles) risk failing MDEC's compliance audit.
• Ignoring power tariffs for data-centre projects. Data centres exceeding 100 MW capacity face ultra-high voltage tariffs implemented in July 2025 that could add USD 15–20 million per year in energy costs. Factor this into financial models and consider Renewable Energy (RE) purchasing agreements to mitigate the impact.

What to Do Next: Your Action Checklist

If you are a foreign tech company considering Malaysia as a regional base, the path is clear and the window is closing:

1. Incorporate your Malaysian Sdn Bhd now. There is no MD Status without a local entity. Use ONEKEY BIZ's Sdn Bhd incorporation service to get this done in days, not weeks.
2. Map your activities to MDEC's Approved Activity list. Identify your primary and secondary qualifying activities and draft a one-page business description that matches MDEC's language.
3. Apply for MD Status immediately after incorporation. The MD-CC approval process takes 4–8 weeks on average. Every week of delay is a week closer to the 2027 tax-incentive deadline without the tax benefit.
4. Model RTR vs ITA before submitting the tax incentive application. Engage your tax adviser to run the numbers over a 10-year horizon. The choice is irrevocable once submitted.
5. Evaluate MDLR-recognised locations early in your office/facility selection process. For premium operations, MD Nexus locations in Cyberjaya and KL city-fringe offer government credibility, connectivity, and access to MDEC-facilitated programmes. For data-centre or AI infrastructure investment, assess MD Tech Zone sites in Cyberjaya and Johor.
6. Plan your talent pipeline in parallel. Engage the MDEC eXpats Service Centre for foreign knowledge worker quota allocation. MD Status Green Lane Employment Pass processing is significantly faster than the standard route.

Questions about the sequence, costs, or specific requirements for your company's situation? Contact the ONEKEY BIZ team for a consultation — we help foreign companies from China, Taiwan, Hong Kong and Singapore navigate the complete Malaysia market-entry journey, from entity setup through to MDEC licensing and ongoing compliance.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.