How to Open a Cafe in Malaysia 2026 | Guide to Permit, Certificate & Insurance
Opening a cafe in Malaysia is more than finding the right location and menu. Before launch, you may need to sort out SSM registration, local council licences, BOMBA requirements, and lease-driven insurance obligations. This guide walks you through the key 2026 requirements clearly — and helps you avoid the compliance gaps that often delay opening.
Contents
- Complete Malaysia Cafe License Checklist
- Step 1: Register Your Business with SSM
- Step 2: Obtain Your Premise & Signboard Licence from Your Local Council (PBT)
- Step 3: Mandatory Food Handler Training and Typhoid Vaccination 
- Step 4: BOMBA Fire Certificate
- Step 5: Public Liability Insurance
- Step 6: Halal Certification
- Step 7: Optional Licences — Liquor and Music
- How Long Does It Take to Get a Cafe Licence in Malaysia
- Organising Your Cafe Records for Annual Compliance Checks
- Frequently Asked Questions
Complete Malaysia Cafe License Checklist
Every cafe in Malaysia must obtain several licenses and approvals before serving a single customer. The exact combination depends on your ownership structure, premises type, concept, and location — but the table below covers the full universe of requirements a cafe operator will encounter.
| License / Permit | Issuing Body | Mandatory? | Official Portal / Contact | Typical Processing Time |
|---|---|---|---|---|
|
SSM Business Registration |
Yes — all cafes |
|
1–3 working days |
|
|
Premise & Signboard Licence (Composite Licence) |
|
Yes — all cafes |
|
2–4 weeks |
|
Food Handler Training Certificate |
Ministry of Health Malaysia (KKM) via accredited providers |
Yes — all food-handling staff |
|
Immediate on completion |
|
Typhoid Vaccination Record |
Registered Medical Practitioner |
Yes — all food handlers (PBT-enforced) |
Available at any registered clinic or hospital |
Immediate |
|
BOMBA Fire Certificate (FC) |
Yes — for designated premises (see Section 4) |
Apply via JBPM SPKA Portal |
Allow 2+ months |
|
|
WRT (Wholesale, Retail & Trade) Licence |
Yes — foreign-owned cafes (>50% foreign shareholding) |
|
1–3 months |
|
|
Halal Certification |
Department of Islamic Development Malaysia (JAKIM) / State Islamic Department (JAIN/MAIN) |
Optional — required if marketing as “Halal” |
Apply via MYeHALAL Portal |
3–6 months end-to-end |
|
Liquor / Public House Licence |
|
Optional — required if serving alcohol |
Contact your local PBT licensing unit |
Varies by PBT |
|
Music Licence (MACP / PPM) |
Optional — required if playing copyrighted music |
Immediate on payment |
||
|
Public Liability Insurance |
Licensed insurers (market-based) |
|
Contact licensed insurance brokers |
Immediate on policy issuance |
Source: The Star, May 21, 2026.
Step 1: Register Your Business with SSM
SSM registration is the legal foundation everything else is built on — no bank account, no PBT licence application, and no POS onboarding can proceed without it.
Choose your entity type first:
-
Sole Proprietorship or Partnership — registered under the Registration of Businesses Act 1956 via Ezbiz. Fees: RM30 (personal name) to RM60 (trade name) per year. Simple to set up but carries unlimited personal liability.
-
Private Limited Company (Sdn Bhd) — incorporated under the Companies Act 2016 via MyCoID. A flat RM1,000 incorporation fee; requires a company secretary and annual compliance filings. Preferred for operators seeking limited liability or outside investors.
When registering, state your business nature accurately (e.g. café, restaurant, or F&B services). An inaccurate business description can delay PBT licence approvals and slow downstream processes like merchant account applications.
For foreign-owned cafes, note the WRT requirement early!
If your cafe has more than 50% foreign shareholding, you must incorporate a Malaysian Sdn Bhd before applying for a WRT licence from KPDN. KPDN typically requires a minimum paid-up capital of RM1,000,000 for 100% foreign-owned entities. The WRT application uses the WRT1 form, takes 1–3 months, and costs RM3,000. Budget time and capital for this before signing any lease.
Step 2: Obtain Your Premise & Signboard Licence from Your Local Council (PBT)
Every cafe operating in Malaysia — regardless of size or concept — must hold a valid Premise Licence and Signboard Licence issued by its local council (Pihak Berkuasa Tempatan / PBT). In Kuala Lumpur, this is DBKL; in Subang Jaya, it is MBSJ; in Petaling Jaya, MBPJ — and so on. For Kuala Lumpur operators, applications and renewals are handled through DBKL's eLesen portal.
What you need to apply:
-
SSM business registration certificate
-
Proof of tenancy (minimum 12 months remaining on lease)
-
Floor plans showing seating layout, escape routes, and grease trap location
-
Food handler training certificates and typhoid vaccination records for all food-handling staff
-
Confirmation that the premises is zoned for F&B use
Most PBTs combine these into a single composite licence application. If your documents are complete, expect 2–4 weeks for approval.
DBKL fees for KL cafes as a reference point:
- Up to 90 sq m: RM200
- 91–120 sq m: RM300
- Above 120 sq m: RM400
2026 DBKL Update
Starting July 1, 2026, DBKL allows eligible business licence renewals to be extended for up to three years in a single renewal. The policy applies to renewal applications that have already been granted permanent approval and is subject to conditions including no outstanding compounds or rental arrears with DBKL.
Key facts for KL cafe operators:
-
2-year renewal: 5% discount on licence fees
-
3-year renewal: 10% discount on licence fees
-
Eligibility condition: No outstanding compounds or rental arrears with DBKL
-
How to renew: Online via elesen.dbkl.gov.my; DBKL counters remain available for operators who need assistance
-
Expected beneficiaries: Approximately 95,000 licensees in Kuala Lumpur, including F&B operators
Source: BERNAMA, May 20, 2026; The Star, May 21, 2026.
Practical note: This policy currently applies to DBKL jurisdiction (Kuala Lumpur). If your cafe is in Selangor, Johor, or another state, check with your respective PBT on their renewal period policy, as it will differ.
Step 3: Mandatory Food Handler Training and Typhoid Vaccination
Before any member of your team handles food or drink, they must complete a KKM-approved food handler training course under the Food Hygiene Regulations 2009. This is a national requirement, not a suggestion.
What the course covers: personal hygiene, safe cooking temperatures, cross-contamination prevention, allergen handling, pest control, and food storage.
-
Format: Can be delivered online; minimum 3 hours
-
Cost: Minimum RM50 per attendee
-
Validity: As of 2024, the Food Handling Certificate is treated as valid for life — staff generally only need this training once
Typhoid vaccination is also required for all food handlers under the Food Hygiene Regulations 2009. Vaccination must be administered by a registered medical practitioner.
-
Cost: Approximately RM80–RM120 at a private clinic
-
Booster interval: Local councils vary — some enforce a 2-year booster, some 3 years. Always follow the stricter PBT requirement for your jurisdiction
Keep digital copies of all food handler certificates and vaccination records. Health inspectors request these during routine checks, and they are also required documents when applying for or renewing your PBT composite licence.
Step 4: BOMBA Fire Certificate
Full enforcement of Malaysia's Fire Certificate (FC) requirement for designated premises began in Q1 2026, as announced by Malaysian Fire and Rescue Department (JBPM) Deputy Director-General (Operations) Datuk Ahmad Izram Othman. Premises that fail to comply face fines of up to RM50,000, five years' imprisonment, or both under the Fire Services Act 1988.
Source: BERNAMA, August 2025.
Does Your Cafe Qualify as "Designated Premises"?
This is the question most cafe owners get wrong. Under the Fire Services Act 1988, designated premises span nine official categories:
-
Libraries
-
Hospitals and care centres
-
Hotels
-
Hostels and dormitories
-
Offices
-
Shops (which includes retail F&B units)
-
Factories
-
Places of assembly
-
Storage facilities
The practical answer for most cafes:
-
A cafe inside a shopping mall or commercial building with centralised fire systems is very likely subject to designated premises classification — the building owner typically holds the FC, but tenants must verify this and may have separate obligations
-
A standalone shophouse cafe occupying a small floor area (e.g. under 500 sq m) may or may not be classified as a designated premises under "shops" — this depends on the CCC (Certificate of Completion and Compliance) issued by the local authority when the building was constructed
-
If your premises received a CCC, you are required to register for an FC with JBPM
-
When in doubt, contact your state JBPM office directly. Do not assume you are exempt
Apply From the SPKA Portal
All BOMBA Fire Certificate applications and renewals are submitted through the SPKA online portal: spka.bomba.gov.my. The process is online, but physical inspections still occur at your state JBPM office's schedule.
New FC Application — Step by Step:
-
Register on the SPKA portal as building owner or authorised representative
-
Submit fire safety plan drawings (prepared by a qualified fire protection engineer or M&E consultant)
-
Install fire protection systems per approved plans (by a licensed fire protection contractor)
-
Submit Form I (Permohonan Perakuan Bomba) through SPKA with all supporting documents
-
JBPM schedules and conducts a site inspection
-
Address any deficiencies within the deadline set by BOMBA
-
FC issued upon satisfactory compliance — valid for 12 months
Documents required for a new application:
| Document | Prepared By |
|---|---|
| Form I (Permohonan Perakuan Bomba) | Building owner |
| Approved fire safety plans/drawings | Fire protection engineer |
| CCC (Certificate of Completion and Compliance) | Principal Submitting Person |
| Fire system commissioning reports | Fire protection contractor |
| Fire safety management plan | Building owner / safety officer |
For annual renewal (Form III — Permohonan Pembaharuan):
-
Current Fire Certificate (copy)
-
Fire system maintenance records (alarm, sprinklers, extinguishers, hose reels)
-
Fire drill records (last 2 drills minimum)
-
eFEIS certificates for all fire extinguishers
-
Updated fire safety management plan
Recommended renewal timeline:
-
3 months before expiry: Schedule fire system maintenance and fix any defects
-
2 months before expiry: Submit Form III via SPKA — gives buffer for BOMBA scheduling and re-inspection if needed
-
1 month before expiry: BOMBA inspection
-
Before expiry date: New FC issued, no coverage gap
What BOMBA Inspects in Your Cafe
| System | What BOMBA Checks | Common Failure Points |
|---|---|---|
| Fire alarm panel | Zone ID, test records, detector function | Faulty zones, missing test logs, disabled detectors |
| Sprinkler system | Pump operation, pressure, head clearance (min 0.5m) | Storage too close to heads, pump not tested |
| Fire extinguishers | Correct type, valid eFEIS sticker, accessible | Expired tags, wrong type for fire class, blocked access |
| Hose reels | Water pressure, nozzle condition | Low pressure, perished hoses, obstructed cabinets |
| Emergency exits | Swing direction, illuminated signage, clear routes | Doors locked, exit signs not lit, routes used for storage |
| Emergency lighting | Battery backup, escape route coverage | Dead batteries, missing units |
| Fire doors | Self-closing mechanism, seals intact | Doors wedged open, broken closers |
| Access roads | Fire engine access, hydrant unobstructed | Vehicles blocking access, hydrants hidden |
BOMBA FC and Fire Insurance: The Critical Link
Operating a cafe without a valid Fire Certificate does not only expose you to JBPM enforcement — it directly affects your fire insurance coverage. An expired or lapsed FC can give your insurer grounds to dispute or deny fire insurance claims. This matters because:
-
A valid FC demonstrates that your fire protection systems have been independently inspected and certified
-
Some PBT business licence renewals also require proof of a valid FC as a supporting document
-
Maintaining compliant fire systems can qualify you for premium discounts: automatic sprinkler systems typically attract 20–40% discounts on fire insurance premiums
Records to keep accessible at all times for BOMBA inspections:
-
Current Fire Certificate
-
Fire safety management plan
-
Fire drill records (last 2 drills minimum)
-
Fire system maintenance records
-
eFEIS certificates for all extinguishers
-
Fire alarm test logs
Step 5: Public Liability Insurance
Public liability (PL) insurance is not legislated as mandatory under Malaysian law — but if you are opening a cafe in a shopping mall, operating from a managed commercial facility, or signing a standard commercial tenancy agreement, there is a very high probability your landlord will require it as a contractual lease condition before you can take possession of the space.
Why Many Cafe Leases Require It
Shopping mall management routinely specifies a minimum PL coverage of RM1 million in tenancy agreements, often naming the landlord or mall management as an additional insured party.
If you do not hold the required PL policy, you are in breach of your tenancy agreement — which can trigger lease termination.
What Public Liability Insurance Covers for Cafes
| Covered | Not Covered |
|---|---|
| Customer slip-and-fall injuries on your premises | Employee injuries (covered by workmen's compensation) |
| Food poisoning claims from customers | Damage to your own property or equipment |
| Burns/scalds from hot drinks | Intentional harm or criminal acts |
| Damage to a customer's property (e.g. coffee on a laptop) | Product recall costs |
| Legal defence costs | Professional advice liability |
| Injury to delivery riders or suppliers visiting your premises | Contractual liability (unless specifically included) |
Critical note: The most important feature to confirm in any F&B PL policy is the food and drink liability extension. Generic PL policies may cover slip-and-fall but specifically exclude food poisoning claims. Always confirm this extension is included, not excluded, before purchasing.
PL Insurance Checklist Before You Sign Your Lease
-
[ ] Confirm food and drink liability is included (not excluded or listed as optional)
-
[ ] Check that the sum insured meets your landlord or mall's minimum requirement (commonly RM1 million)
-
[ ] Verify whether legal defence costs are inside or additional to the policy limit
-
[ ] Disclose all business activities — catering, delivery, events, pop-ups
-
[ ] Name your landlord or mall as additional insured if the lease requires it
-
[ ] Set a renewal reminder 30 days before policy expiry
Step 6: Halal Certification
Halal certification is optional, but if you intend to brand your cafe as Halal or target Muslim consumers, it is effectively essential — and using the word "Halal" without JAKIM certification constitutes a trade descriptions offence.
JAKIM certification is issued under the MS1500 standard (Malaysian Standard for Halal Food). A cafe with foreign-concept menus or non-Muslim ownership can still obtain Halal certification, provided all operational requirements are met.
Key requirements:
-
All animal-based ingredients and syrups must be sourced from JAKIM-recognised halal suppliers
-
Kitchen segregation must prevent cross-contamination with non-halal ingredients
-
Written Standard Operating Procedures (SOPs) must be in place
-
Staff handling halal food must be trained on halal handling procedures
-
Products must be registered in the FOSIM (Food Safety Information System of Malaysia) system before halal approval is granted
Application process via MYeHalal:
-
Register your business on myehalal.halal.gov.my
-
List all products/menu items in the FOSIM system
-
Submit application with SOPs, supplier halal certificates, and kitchen layout
-
JAKIM conducts an on-site inspection of storage, kitchen layout, and staff practices — and may take product samples for lab testing
-
JAKIM targets certification issuance within 30 days of a satisfactory inspection
Realistic timeline: Allow 3–6 months end-to-end, including preparation. Advisors recommend operating for at least 3 months before applying to accumulate the purchase records and supply chain history that auditors expect to review.
Fees: Application processing approximately RM20; annual restaurant fee approximately RM100–RM200 per premise. Total project costs including training and documentation preparation commonly reach several thousand ringgit.
Important: A cafe cannot hold both a Halal Certificate and a Liquor Licence simultaneously. If your concept includes alcohol, do not apply for Halal certification.
Step 7: Optional Licences — Liquor and Music
Liquor / Public House Licence
If your cafe serves beer, wine, or spirits, you need a Public House Liquor Licence from your local authority (PBT). If you also sell alcohol for takeaway (e.g. bottled wine for off-site consumption), you additionally need a Retail Alcohol Licence. Both can be applied for simultaneously.
Key eligibility considerations:
-
Your premises must pass a police interview as part of the approval process
-
There are distance restrictions from mosques, schools, and majority-Muslim residential areas — confirm with your local PBT before signing a lease in your target location
-
Halal certification and a liquor licence cannot coexist on the same premises
Music Licences: MACP and PPM
If you play copyrighted music in your cafe — including playlist services, background music, or live performances — you are a "music user" under Malaysian copyright law and must hold the appropriate licence.
| Licence | Issuing Body | Covers | Approximate Cost |
|---|---|---|---|
| MACP Music Licence | Music Authors Copyright Protection (MACP) Berhad | Recorded music played publicly | RM847–RM1,376/year for restaurants |
| PPM Public Performance Licence | Public Performance Malaysia (PPM) | Recording rights for performers and labels | Varies by venue size |
| Live Performance Licence | MACP | Live performances of copyrighted songs | RM1,200–RM27,000/year depending on patron numbers |
Contact MACP and PPM with your floor plan and seating capacity to get an accurate annual fee before finalising your budget.
How Long Does It Take to Get a Cafe Licence in Malaysia?
The single most common planning mistake is underestimating how long the full licensing journey takes. Here is a realistic timeline for a Malaysian-owned cafe with a Halal concept:
| Phase | Steps | Minimum Timeline |
|---|---|---|
| Pre-licensing | SSM registration, secure premises, confirm F&B zoning | 2–4 weeks |
| PBT composite licence | Submit application, premise inspection, approval | 2–4 weeks |
| BOMBA FC (if required) | SPKA portal registration, drawings, inspection | 2–3 months |
| Food handler training | Staff complete KKM course + typhoid vaccination | 1–2 weeks |
| Halal certification | MYeHalal application, preparation, JAKIM inspection | 3–6 months |
| Insurance | PL policy application and issuance | Immediate–1 week |
Practical guidance: If you are targeting Halal certification from day one, begin the preparation process before you open — build up your 3-month purchase record, get your SOPs in writing, and confirm your supplier certifications. This is the step that creates the longest dependency in the timeline.
For DBKL-licensed cafes in KL: From July 1, 2026, your annual renewal burden is significantly reduced — you can lock in a 2- or 3-year renewal and bank the 5–10% discount in a single online session.
Organising Your Cafe Records for Annual Compliance Checks
Once your cafe is licensed and operating, compliance becomes an ongoing process of renewals, inspections, and document management. Systems that centralise day-to-day operating records can make this process much easier to manage with inventory tracking and purchase records, real-time reporting, operational visibility like Eats365.
For cafe operators who want a more structured way to keep purchasing, inventory, and reporting records in one place, it helps to see how a system works in practice. Book a free Eats365 POS demo and explore how the inventory and reporting modules can support day-to-day record-keeping for a Malaysian cafe!
"Having to choose eat365 as our store's point of sale system has been a game-changer for our business. It is incredibly informative, providing detailed insights into sales trends and customer preferences. The real-time data and comprehensive reporting tools have significantly improved our operational efficiency and decision-making processes."
— FlaaawithOno, Cafe operator, Malaysia
Frequently Asked Questions
Q: What licences do I need to open a cafe in Malaysia in 2026?
Every cafe needs:
- SSM business registration,
- a composite Premise & Signboard Licence from your local council (PBT)
- KKM-approved food handler training and typhoid vaccinations for all food-handling staff.
If your premises qualifies as designated under the Fire Services Act 1988, a BOMBA Fire Certificate is also mandatory. Halal certification, a liquor licence, music licences, and a WRT licence for foreign-owned cafes are additional requirements depending on your concept and ownership.
Q: Does a small shophouse cafe need a BOMBA Fire Certificate?
Not automatically. Under the Fire Services Act 1988, only designated premises are required to hold a Fire Certificate. The nine designated categories include "shops," but classification depends on the CCC issued for your specific building. If your premises received a CCC from the local authority, you must register for an FC via spka.bomba.gov.my. If you are unsure, contact your state JBPM office directly — do not assume you are exempt, especially after full BOMBA enforcement began in Q1 2026.
Q: Is public liability insurance legally required to open a cafe in Malaysia?
Public liability insurance is not mandated by Malaysian law, but it is contractually required by many shopping mall landlords and commercial tenancy agreements, typically with a minimum coverage of RM1 million. Operating without it when your lease requires it constitutes a breach of your tenancy agreement. It also covers your business against food poisoning claims, customer injury claims, and property damage claims — risks that every F&B operator faces.
Q: Can a foreigner open a cafe in Malaysia?
Yes, but foreign-owned cafes (more than 50% foreign shareholding) must first incorporate a Malaysian Sdn Bhd and then apply for a WRT (Wholesale, Retail & Trade) licence from KPDN. KPDN typically requires a minimum paid-up capital of RM1,000,000 for 100% foreign-owned entities. The WRT licence costs RM3,000, takes 1–3 months to approve, and is valid for two years.
Q: How do I apply for halal certification for my cafe?
Apply through JAKIM's MYeHalal portal at myehalal.halal.gov.my. You must first register all menu items in FOSIM, prepare written SOPs, and source all animal-based ingredients from JAKIM-recognised halal suppliers. JAKIM will conduct an on-site inspection and may take product samples. Operate for at least three months before applying to build up the purchase records and traceability documentation auditors require. Allow 3–6 months for the full process.
Q: What is the DBKL multi-year licence renewal and how do I qualify?
From July 1, 2026, DBKL allows eligible business licence renewals for up to three years. A 2-year renewal attracts a 5% discount and a 3-year renewal a 10% discount on licence fees. To qualify, you must have no outstanding compounds or rental arrears with DBKL. Renew online at elesen.dbkl.gov.my. This policy currently applies to Kuala Lumpur licensees only — check with your state PBT if your cafe is outside KL.