How to Open a Cafe in Malaysia 2026 | Guide to Permit, Certificate & Insurance

How to Open a Cafe in Malaysia 2026 | Guide to Permit, Certificate & Insurance

Contents

Complete Malaysia Cafe License Checklist

Every cafe in Malaysia must obtain several licenses and approvals before serving a single customer. The exact combination depends on your ownership structure, premises type, concept, and location — but the table below covers the full universe of requirements a cafe operator will encounter.

 

License / Permit Issuing Body Mandatory? Official Portal / Contact Typical Processing Time

SSM Business Registration

Companies Commission of Malaysia (SSM)

Yes — all cafes

1–3 working days

Premise & Signboard Licence (Composite Licence)

Yes — all cafes

  • Apply via your local PBT licensing portal

  • For Kuala Lumpur, use DBKL eLesen

  • From July 1, 2026, eligible DBKL renewals may be extended to 2 or 3 years with 5% and 10% fee discounts respectively, subject to conditions

2–4 weeks

Food Handler Training Certificate

Ministry of Health Malaysia (KKM) via accredited providers

Yes — all food-handling staff

  • Apply through KKM-accredited training providers

  • Minimum cost: RM50/person

Immediate on completion

Typhoid Vaccination Record

Registered Medical Practitioner

Yes — all food handlers (PBT-enforced)

Available at any registered clinic or hospital

Immediate

BOMBA Fire Certificate (FC)

Malaysian Fire and Rescue Department (JBPM)

Yes — for designated premises (see Section 4)

Apply via JBPM SPKA Portal

Allow 2+ months

WRT (Wholesale, Retail & Trade) Licence

Ministry of Domestic Trade and Cost of Living (KPDN)

Yes — foreign-owned cafes (>50% foreign shareholding)

  • Apply through KPDN

  • Uses SSM WRT1 form

1–3 months

Halal Certification

Department of Islamic Development Malaysia (JAKIM) / State Islamic Department (JAIN/MAIN)

Optional — required if marketing as “Halal”

Apply via MYeHALAL Portal

3–6 months end-to-end

Liquor / Public House Licence

Optional — required if serving alcohol

Contact your local PBT licensing unit

Varies by PBT

Music Licence (MACP / PPM)

Optional — required if playing copyrighted music

  • Apply directly with MACP

  • Apply directly with PPM

Immediate on payment

Public Liability Insurance

Licensed insurers (market-based)

  • Not legislated

  • Often contractually required by mall landlords and commercial tenancy agreements

Contact licensed insurance brokers

Immediate on policy issuance

 

Source: The Star, May 21, 2026.

 

Step 1: Register Your Business with SSM

SSM registration is the legal foundation everything else is built on — no bank account, no PBT licence application, and no POS onboarding can proceed without it.

 

Choose your entity type first:

  • Sole Proprietorship or Partnership — registered under the Registration of Businesses Act 1956 via Ezbiz. Fees: RM30 (personal name) to RM60 (trade name) per year. Simple to set up but carries unlimited personal liability.

  • Private Limited Company (Sdn Bhd) — incorporated under the Companies Act 2016 via MyCoID. A flat RM1,000 incorporation fee; requires a company secretary and annual compliance filings. Preferred for operators seeking limited liability or outside investors.

When registering, state your business nature accurately (e.g. café, restaurant, or F&B services). An inaccurate business description can delay PBT licence approvals and slow downstream processes like merchant account applications.

 

For foreign-owned cafes, note the WRT requirement early!

 If your cafe has more than 50% foreign shareholding, you must incorporate a Malaysian Sdn Bhd before applying for a WRT licence from KPDN. KPDN typically requires a minimum paid-up capital of RM1,000,000 for 100% foreign-owned entities. The WRT application uses the WRT1 form, takes 1–3 months, and costs RM3,000. Budget time and capital for this before signing any lease.

 

Step 2: Obtain Your Premise & Signboard Licence from Your Local Council (PBT)

Every cafe operating in Malaysia — regardless of size or concept — must hold a valid Premise Licence and Signboard Licence issued by its local council (Pihak Berkuasa Tempatan / PBT). In Kuala Lumpur, this is DBKL; in Subang Jaya, it is MBSJ; in Petaling Jaya, MBPJ — and so on. For Kuala Lumpur operators, applications and renewals are handled through DBKL's eLesen portal.

 

What you need to apply:

  • SSM business registration certificate

  • Proof of tenancy (minimum 12 months remaining on lease)

  • Floor plans showing seating layout, escape routes, and grease trap location

  • Food handler training certificates and typhoid vaccination records for all food-handling staff

  • Confirmation that the premises is zoned for F&B use

Most PBTs combine these into a single composite licence application. If your documents are complete, expect 2–4 weeks for approval.

 

DBKL fees for KL cafes as a reference point:

  • Up to 90 sq m: RM200
  • 91–120 sq m: RM300
  • Above 120 sq m: RM400

 

2026 DBKL Update

Starting July 1, 2026, DBKL allows eligible business licence renewals to be extended for up to three years in a single renewal. The policy applies to renewal applications that have already been granted permanent approval and is subject to conditions including no outstanding compounds or rental arrears with DBKL.

Key facts for KL cafe operators:

  • 2-year renewal: 5% discount on licence fees

  • 3-year renewal: 10% discount on licence fees

  • Eligibility condition: No outstanding compounds or rental arrears with DBKL

  • How to renew: Online via elesen.dbkl.gov.my; DBKL counters remain available for operators who need assistance

  • Expected beneficiaries: Approximately 95,000 licensees in Kuala Lumpur, including F&B operators

Source: BERNAMA, May 20, 2026; The Star, May 21, 2026.

Practical note: This policy currently applies to DBKL jurisdiction (Kuala Lumpur). If your cafe is in Selangor, Johor, or another state, check with your respective PBT on their renewal period policy, as it will differ.

 

Step 3: Mandatory Food Handler Training and Typhoid Vaccination 

Before any member of your team handles food or drink, they must complete a KKM-approved food handler training course under the Food Hygiene Regulations 2009. This is a national requirement, not a suggestion.

What the course covers: personal hygiene, safe cooking temperatures, cross-contamination prevention, allergen handling, pest control, and food storage.

  • Format: Can be delivered online; minimum 3 hours

  • Cost: Minimum RM50 per attendee

  • Validity: As of 2024, the Food Handling Certificate is treated as valid for life — staff generally only need this training once

Typhoid vaccination is also required for all food handlers under the Food Hygiene Regulations 2009. Vaccination must be administered by a registered medical practitioner.

  • Cost: Approximately RM80–RM120 at a private clinic

  • Booster interval: Local councils vary — some enforce a 2-year booster, some 3 years. Always follow the stricter PBT requirement for your jurisdiction

Keep digital copies of all food handler certificates and vaccination records. Health inspectors request these during routine checks, and they are also required documents when applying for or renewing your PBT composite licence.

 

Step 4: BOMBA Fire Certificate

Full enforcement of Malaysia's Fire Certificate (FC) requirement for designated premises began in Q1 2026, as announced by Malaysian Fire and Rescue Department (JBPM) Deputy Director-General (Operations) Datuk Ahmad Izram Othman. Premises that fail to comply face fines of up to RM50,000, five years' imprisonment, or both under the Fire Services Act 1988.

Source: BERNAMA, August 2025.

 

Does Your Cafe Qualify as "Designated Premises"?

This is the question most cafe owners get wrong. Under the Fire Services Act 1988, designated premises span nine official categories:

  1. Libraries

  2. Hospitals and care centres

  3. Hotels

  4. Hostels and dormitories

  5. Offices

  6. Shops (which includes retail F&B units)

  7. Factories

  8. Places of assembly

  9. Storage facilities

The practical answer for most cafes:

  • A cafe inside a shopping mall or commercial building with centralised fire systems is very likely subject to designated premises classification — the building owner typically holds the FC, but tenants must verify this and may have separate obligations

  • A standalone shophouse cafe occupying a small floor area (e.g. under 500 sq m) may or may not be classified as a designated premises under "shops" — this depends on the CCC (Certificate of Completion and Compliance) issued by the local authority when the building was constructed

  • If your premises received a CCC, you are required to register for an FC with JBPM

  • When in doubt, contact your state JBPM office directly. Do not assume you are exempt

 

Apply From the SPKA Portal

All BOMBA Fire Certificate applications and renewals are submitted through the SPKA online portal: spka.bomba.gov.my. The process is online, but physical inspections still occur at your state JBPM office's schedule.

New FC Application — Step by Step:

  1. Register on the SPKA portal as building owner or authorised representative

  2. Submit fire safety plan drawings (prepared by a qualified fire protection engineer or M&E consultant)

  3. Install fire protection systems per approved plans (by a licensed fire protection contractor)

  4. Submit Form I (Permohonan Perakuan Bomba) through SPKA with all supporting documents

  5. JBPM schedules and conducts a site inspection

  6. Address any deficiencies within the deadline set by BOMBA

  7. FC issued upon satisfactory compliance — valid for 12 months

Documents required for a new application:

Document Prepared By
Form I (Permohonan Perakuan Bomba) Building owner
Approved fire safety plans/drawings Fire protection engineer
CCC (Certificate of Completion and Compliance) Principal Submitting Person
Fire system commissioning reports Fire protection contractor
Fire safety management plan Building owner / safety officer

For annual renewal (Form III — Permohonan Pembaharuan):

  • Current Fire Certificate (copy)

  • Fire system maintenance records (alarm, sprinklers, extinguishers, hose reels)

  • Fire drill records (last 2 drills minimum)

  • eFEIS certificates for all fire extinguishers

  • Updated fire safety management plan

Recommended renewal timeline:

  • 3 months before expiry: Schedule fire system maintenance and fix any defects

  • 2 months before expiry: Submit Form III via SPKA — gives buffer for BOMBA scheduling and re-inspection if needed

  • 1 month before expiry: BOMBA inspection

  • Before expiry date: New FC issued, no coverage gap

 

How to Open a Cafe in Malaysia 2026 | Guide to Permit, Certificate & Insurance

 

What BOMBA Inspects in Your Cafe

System What BOMBA Checks Common Failure Points
Fire alarm panel Zone ID, test records, detector function Faulty zones, missing test logs, disabled detectors
Sprinkler system Pump operation, pressure, head clearance (min 0.5m) Storage too close to heads, pump not tested
Fire extinguishers Correct type, valid eFEIS sticker, accessible Expired tags, wrong type for fire class, blocked access
Hose reels Water pressure, nozzle condition Low pressure, perished hoses, obstructed cabinets
Emergency exits Swing direction, illuminated signage, clear routes Doors locked, exit signs not lit, routes used for storage
Emergency lighting Battery backup, escape route coverage Dead batteries, missing units
Fire doors Self-closing mechanism, seals intact Doors wedged open, broken closers
Access roads Fire engine access, hydrant unobstructed Vehicles blocking access, hydrants hidden

 

Operating a cafe without a valid Fire Certificate does not only expose you to JBPM enforcement — it directly affects your fire insurance coverage. An expired or lapsed FC can give your insurer grounds to dispute or deny fire insurance claims. This matters because:

  • A valid FC demonstrates that your fire protection systems have been independently inspected and certified

  • Some PBT business licence renewals also require proof of a valid FC as a supporting document

  • Maintaining compliant fire systems can qualify you for premium discounts: automatic sprinkler systems typically attract 20–40% discounts on fire insurance premiums

Records to keep accessible at all times for BOMBA inspections:

  • Current Fire Certificate

  • Fire safety management plan

  • Fire drill records (last 2 drills minimum)

  • Fire system maintenance records

  • eFEIS certificates for all extinguishers

  • Fire alarm test logs

 

Step 5: Public Liability Insurance

Public liability (PL) insurance is not legislated as mandatory under Malaysian law — but if you are opening a cafe in a shopping mall, operating from a managed commercial facility, or signing a standard commercial tenancy agreement, there is a very high probability your landlord will require it as a contractual lease condition before you can take possession of the space.

 

Why Many Cafe Leases Require It

Shopping mall management routinely specifies a minimum PL coverage of RM1 million in tenancy agreements, often naming the landlord or mall management as an additional insured party.

If you do not hold the required PL policy, you are in breach of your tenancy agreement — which can trigger lease termination.

 

What Public Liability Insurance Covers for Cafes

Covered Not Covered
Customer slip-and-fall injuries on your premises Employee injuries (covered by workmen's compensation)
Food poisoning claims from customers Damage to your own property or equipment
Burns/scalds from hot drinks Intentional harm or criminal acts
Damage to a customer's property (e.g. coffee on a laptop) Product recall costs
Legal defence costs Professional advice liability
Injury to delivery riders or suppliers visiting your premises Contractual liability (unless specifically included)

Critical note: The most important feature to confirm in any F&B PL policy is the food and drink liability extension. Generic PL policies may cover slip-and-fall but specifically exclude food poisoning claims. Always confirm this extension is included, not excluded, before purchasing.

 

PL Insurance Checklist Before You Sign Your Lease

  • [ ] Confirm food and drink liability is included (not excluded or listed as optional)

  • [ ] Check that the sum insured meets your landlord or mall's minimum requirement (commonly RM1 million)

  • [ ] Verify whether legal defence costs are inside or additional to the policy limit

  • [ ] Disclose all business activities — catering, delivery, events, pop-ups

  • [ ] Name your landlord or mall as additional insured if the lease requires it

  • [ ] Set a renewal reminder 30 days before policy expiry

 

Step 6: Halal Certification

Halal certification is optional, but if you intend to brand your cafe as Halal or target Muslim consumers, it is effectively essential — and using the word "Halal" without JAKIM certification constitutes a trade descriptions offence.

JAKIM certification is issued under the MS1500 standard (Malaysian Standard for Halal Food). A cafe with foreign-concept menus or non-Muslim ownership can still obtain Halal certification, provided all operational requirements are met.

Key requirements:

  • All animal-based ingredients and syrups must be sourced from JAKIM-recognised halal suppliers

  • Kitchen segregation must prevent cross-contamination with non-halal ingredients

  • Written Standard Operating Procedures (SOPs) must be in place

  • Staff handling halal food must be trained on halal handling procedures

  • Products must be registered in the FOSIM (Food Safety Information System of Malaysia) system before halal approval is granted

Application process via MYeHalal:

  1. Register your business on myehalal.halal.gov.my

  2. List all products/menu items in the FOSIM system

  3. Submit application with SOPs, supplier halal certificates, and kitchen layout

  4. JAKIM conducts an on-site inspection of storage, kitchen layout, and staff practices — and may take product samples for lab testing

  5. JAKIM targets certification issuance within 30 days of a satisfactory inspection

Realistic timeline: Allow 3–6 months end-to-end, including preparation. Advisors recommend operating for at least 3 months before applying to accumulate the purchase records and supply chain history that auditors expect to review.

Fees: Application processing approximately RM20; annual restaurant fee approximately RM100–RM200 per premise. Total project costs including training and documentation preparation commonly reach several thousand ringgit.

Important: A cafe cannot hold both a Halal Certificate and a Liquor Licence simultaneously. If your concept includes alcohol, do not apply for Halal certification.

 

Step 7: Optional Licences — Liquor and Music

Liquor / Public House Licence

If your cafe serves beer, wine, or spirits, you need a Public House Liquor Licence from your local authority (PBT). If you also sell alcohol for takeaway (e.g. bottled wine for off-site consumption), you additionally need a Retail Alcohol Licence. Both can be applied for simultaneously.

Key eligibility considerations:

  • Your premises must pass a police interview as part of the approval process

  • There are distance restrictions from mosques, schools, and majority-Muslim residential areas — confirm with your local PBT before signing a lease in your target location

  • Halal certification and a liquor licence cannot coexist on the same premises

 

Music Licences: MACP and PPM

If you play copyrighted music in your cafe — including playlist services, background music, or live performances — you are a "music user" under Malaysian copyright law and must hold the appropriate licence.

Licence Issuing Body Covers Approximate Cost
MACP Music Licence Music Authors Copyright Protection (MACP) Berhad Recorded music played publicly RM847–RM1,376/year for restaurants
PPM Public Performance Licence Public Performance Malaysia (PPM) Recording rights for performers and labels Varies by venue size
Live Performance Licence MACP Live performances of copyrighted songs RM1,200–RM27,000/year depending on patron numbers

Contact MACP and PPM with your floor plan and seating capacity to get an accurate annual fee before finalising your budget.

 

How Long Does It Take to Get a Cafe Licence in Malaysia?

The single most common planning mistake is underestimating how long the full licensing journey takes. Here is a realistic timeline for a Malaysian-owned cafe with a Halal concept:

Phase Steps Minimum Timeline
Pre-licensing SSM registration, secure premises, confirm F&B zoning 2–4 weeks
PBT composite licence Submit application, premise inspection, approval 2–4 weeks
BOMBA FC (if required) SPKA portal registration, drawings, inspection 2–3 months
Food handler training Staff complete KKM course + typhoid vaccination 1–2 weeks
Halal certification MYeHalal application, preparation, JAKIM inspection 3–6 months
Insurance PL policy application and issuance Immediate–1 week

Practical guidance: If you are targeting Halal certification from day one, begin the preparation process before you open — build up your 3-month purchase record, get your SOPs in writing, and confirm your supplier certifications. This is the step that creates the longest dependency in the timeline.

For DBKL-licensed cafes in KL: From July 1, 2026, your annual renewal burden is significantly reduced — you can lock in a 2- or 3-year renewal and bank the 5–10% discount in a single online session.

 

Organising Your Cafe Records for Annual Compliance Checks

Once your cafe is licensed and operating, compliance becomes an ongoing process of renewals, inspections, and document management. Systems that centralise day-to-day operating records can make this process much easier to manage with inventory tracking and purchase records, real-time reporting, operational visibility like Eats365.

For cafe operators who want a more structured way to keep purchasing, inventory, and reporting records in one place, it helps to see how a system works in practice. Book a free Eats365 POS demo and explore how the inventory and reporting modules can support day-to-day record-keeping for a Malaysian cafe!

 

"Having to choose eat365 as our store's point of sale system has been a game-changer for our business. It is incredibly informative, providing detailed insights into sales trends and customer preferences. The real-time data and comprehensive reporting tools have significantly improved our operational efficiency and decision-making processes."
— FlaaawithOno, Cafe operator, Malaysia

 

Frequently Asked Questions

Q: What licences do I need to open a cafe in Malaysia in 2026?

Every cafe needs:

  1. SSM business registration,
  2. a composite Premise & Signboard Licence from your local council (PBT)
  3. KKM-approved food handler training and typhoid vaccinations for all food-handling staff.

If your premises qualifies as designated under the Fire Services Act 1988, a BOMBA Fire Certificate is also mandatory. Halal certification, a liquor licence, music licences, and a WRT licence for foreign-owned cafes are additional requirements depending on your concept and ownership.

 

Q: Does a small shophouse cafe need a BOMBA Fire Certificate?

Not automatically. Under the Fire Services Act 1988, only designated premises are required to hold a Fire Certificate. The nine designated categories include "shops," but classification depends on the CCC issued for your specific building. If your premises received a CCC from the local authority, you must register for an FC via spka.bomba.gov.my. If you are unsure, contact your state JBPM office directly — do not assume you are exempt, especially after full BOMBA enforcement began in Q1 2026.

 

Q: Is public liability insurance legally required to open a cafe in Malaysia?

Public liability insurance is not mandated by Malaysian law, but it is contractually required by many shopping mall landlords and commercial tenancy agreements, typically with a minimum coverage of RM1 million. Operating without it when your lease requires it constitutes a breach of your tenancy agreement. It also covers your business against food poisoning claims, customer injury claims, and property damage claims — risks that every F&B operator faces.

 

Q: Can a foreigner open a cafe in Malaysia?

Yes, but foreign-owned cafes (more than 50% foreign shareholding) must first incorporate a Malaysian Sdn Bhd and then apply for a WRT (Wholesale, Retail & Trade) licence from KPDN. KPDN typically requires a minimum paid-up capital of RM1,000,000 for 100% foreign-owned entities. The WRT licence costs RM3,000, takes 1–3 months to approve, and is valid for two years.

 

Q: How do I apply for halal certification for my cafe?

Apply through JAKIM's MYeHalal portal at myehalal.halal.gov.my. You must first register all menu items in FOSIM, prepare written SOPs, and source all animal-based ingredients from JAKIM-recognised halal suppliers. JAKIM will conduct an on-site inspection and may take product samples. Operate for at least three months before applying to build up the purchase records and traceability documentation auditors require. Allow 3–6 months for the full process.

 

Q: What is the DBKL multi-year licence renewal and how do I qualify?

From July 1, 2026, DBKL allows eligible business licence renewals for up to three years. A 2-year renewal attracts a 5% discount and a 3-year renewal a 10% discount on licence fees. To qualify, you must have no outstanding compounds or rental arrears with DBKL. Renew online at elesen.dbkl.gov.my. This policy currently applies to Kuala Lumpur licensees only — check with your state PBT if your cafe is outside KL. 

How Much Does It Cost to Open a Small Café in Malaysia? 7 Budget-Keeping Strategies
How Much Does It Cost to Open a Small Café in Malaysia? 7 Budget-Keeping Strategies
What Is a Cloud Kitchen? Essential Tips to Maximize Your Cloud Kitchen Sales!
What Is a Cloud Kitchen? Essential Tips to Maximize Your Cloud Kitchen Sales!
How to Start a Home-Based Business in Malaysia: A Comprehensive Guide
How to Start a Home-Based Business in Malaysia: A Comprehensive Guide