F&B Licensing In Malaysia: SSM, DBKL, BOMBA, JAKIM, MOH

Malaysian F&B licensing is not optional. Operating without the right licenses risks fines, closure orders, and in some cases personal criminal liability for the directors. Here is the complete map of what you need, what it costs, how long it takes, and the order you should chase them in.

This guide is written for the operator opening a new venue, the operator preparing to add a second outlet, and the operator who has been running for a while on incomplete paperwork and wants to clean things up before something forces the issue. Specifics quoted are for 2026, in Malaysian ringgit, sourced from the official agencies and current operator practice in Klang Valley, Penang and Johor Bahru. Council fees vary widely; the ranges below cover the typical band.

If you remember nothing else from this article, remember this: licensing is sequenced. Skip the order, and applications that depend on earlier paperwork bounce back. The operator who runs the licenses in parallel without understanding the dependencies finishes 6 weeks later than the operator who runs them in the correct order.

The mandatory licenses: every venue needs these

Four licenses are non-negotiable for any F&B venue in Malaysia, no matter how small or informal. Even a single-counter takeaway kiosk in a mall corner needs all four. Skipping any one of these is the most common reason a venue gets shut down by enforcement officers on a random Tuesday afternoon.

1. SSM Business Registration (RM30 to RM1,010)

SSM stands for Suruhanjaya Syarikat Malaysia, the Companies Commission of Malaysia. Every business in Malaysia needs to be registered with SSM before it does anything else. Without an SSM business registration number, you cannot rent a commercial unit, open a business bank account, apply for any other license, or hire staff legally.

You have three entity choices:

• Sole proprietorship. Registration fee RM30 for a personal-name business, RM60 for a trade name. Annual renewal RM30 to RM60. Fast (1 to 3 working days online via the SSM portal). Cheapest. The downside: unlimited personal liability, so a debt or lawsuit can reach your house and your car.
• Partnership. Same fees as sole proprietorship, but two to twenty partners share liability. Same unlimited liability problem.
• Private limited (Sdn Bhd). Registration fee RM1,010 including the name search and incorporation. Annual filing and audit obligations add roughly RM2,500 to RM5,000 a year if you use a company secretary and an auditor. The advantage: limited liability, easier to bring in investors, easier to scale to multiple outlets later.

For a first-time operator opening a small kopitiam or single-outlet cafe, sole prop is fine. For anyone planning multiple outlets, taking external investment, or operating in a high-litigation-risk segment (alcohol-serving venues, late-night, food courts with public liability exposure), Sdn Bhd is worth the extra cost from day one. The conversion later, from sole prop to Sdn Bhd, is messy and triggers re-applications for every other license downstream.

Timeline: Sole prop, 1 to 3 working days. Sdn Bhd, 5 to 10 working days for incorporation, plus another week for the company secretary to set up the statutory books.

2. Local Council Premise License (RM200 to RM1,500)

Lesen Premis Perniagaan, the business premise license issued by your local authority. Which authority depends on where the venue is. In Kuala Lumpur it is DBKL (Dewan Bandaraya Kuala Lumpur). In Petaling Jaya it is MBPJ. In Penang island it is MBPP. In Subang Jaya it is MBSJ. In Johor Bahru it is MBJB. In smaller districts it is the relevant Majlis Daerah or Majlis Perbandaran.

This license is the single slowest and most variable step. It typically takes 2 to 8 weeks depending on the council, with some councils running 12 weeks during busy quarters. The fee depends on the venue type, floor area and the council. A small cafe in PJ might pay RM300 a year. A large restaurant in KLCC area might pay RM1,500.

The premise license application bundles together a stack of supporting documents:

• SSM registration certificate
• Signed tenancy agreement (some councils want it stamped at LHDN first)
• Floor plan of the unit with kitchen, dining, washroom, refuse area marked
• Owner consent letter if the unit is leased
• Photographs of the storefront and signage
• BOMBA fire safety clearance (see below; this is the critical dependency)
• Health department clearance from the council's own inspection

The council will physically inspect the premise. Expect a visit from a health officer and sometimes a planning officer. They will check kitchen ventilation, refuse storage, washroom location relative to the kitchen, pest control measures and the structural condition of the unit. Failure on any of these means a corrective action list and a re-inspection.

3. BOMBA Fire Safety Certificate (RM300 to RM2,500)

BOMBA is Jabatan Bomba dan Penyelamat Malaysia, the Fire and Rescue Department. Every commercial premise needs a BOMBA fire safety certificate before the local council will issue the premise license. For F&B venues with cooking equipment (which is all of them), BOMBA scrutiny is heavier.

What BOMBA checks:

• Fire extinguishers (correct type for the kitchen hazard, correctly located, current servicing tags)
• Kitchen hood suppression system, if you have an open flame or deep fryer
• Emergency exit signage and unobstructed exit paths
• Smoke detectors and fire alarms where required
• Sprinkler system for larger venues or venues in malls (mandatory above a certain floor area; smaller cafes often exempt)
• Gas cylinder storage if you use LPG
• Electrical wiring conforming to commercial standards

The fee is RM300 to RM2,500 depending on venue size, layout complexity and whether the venue needs a full sprinkler system. The timeline is 4 to 12 weeks, partly because BOMBA inspectors are scheduled out, partly because most venues fail the first inspection and need to fix something before the re-inspection.

For a small kopitiam or cafe under 200 square meters, the BOMBA budget is usually RM500 to RM900 plus another RM800 to RM2,000 in extinguishers, signage and minor wiring fixes. For a restaurant with a full kitchen hood and gas range, the BOMBA-related fit-out costs (suppression system, ductwork, fire-rated gypsum boards) can hit RM15,000 to RM40,000 before the certificate is granted. Budget for this; it is the single most underestimated line in new-venue budgets.

4. MOH Food Handler Certificate and Typhoid Clearance (RM30 to RM80 per staff member)

MOH is Kementerian Kesihatan Malaysia, the Ministry of Health. Every person who handles food in a Malaysian F&B venue, from the chef to the cashier who occasionally plates a kuih, needs two documents:

• Typhoid vaccination certificate. Issued by a registered clinic after the typhoid jab. Valid for 3 years. Cost RM30 to RM80 per person including the consultation and the jab.
• Food Handler Course completion certificate. A short course (typically a single day) covering food hygiene, allergen handling, cross-contamination, temperature control. Issued by MOH-approved training providers. Cost RM30 to RM60 per person. Valid for life as long as the typhoid certificate stays current.

The full process per staff member takes about 2 weeks (the course, then a clinic visit, then the certificate is issued). The math: a 5-person team costs RM300 to RM700 in total, and you should renew it for every new hire on their first week. Hold copies in a binder for inspection day; the health officer will ask to see them.

This is the cheapest license category by far and one of the most often overlooked. Enforcement officers love checking this because it is visible and easy to fail. A venue without current typhoid certificates for the floor staff gets a compound notice immediately.

The conditional licenses: depends on what you serve

Four more licenses come up depending on the menu, the venue concept, and whether you hire staff. None of these are universal, but most operators need at least one or two.

1. JAKIM Halal Certification (RM2,000 to RM5,000)

JAKIM is Jabatan Kemajuan Islam Malaysia. The halal certification is technically optional, but for a Muslim-majority market it opens 40 to 60 percent more of the customer base. Office workers, family bookings and major delivery platforms all skew toward halal-certified venues, and many venues that started halal-friendly without certification eventually convert because the certified competition was eating their lunch.

The fee structure depends on venue size and category:

• Small venue (under 100 seats, single outlet): RM2,000 to RM3,000
• Medium venue (100 to 300 seats): RM3,000 to RM4,000
• Large venue or multi-outlet chain: RM4,000 to RM5,000 plus per-outlet add-ons

The timeline is 3 to 6 months for first-time applicants. The audit covers your ingredient supply chain (every supplier traced and verified), your storage discipline (no cross-storage of halal and non-halal goods), your staff (at least two Muslim staff in the kitchen for most certification tiers), and your operational paperwork. The annual reaudit is RM800 to RM1,500 depending on outlet count.

For a deeper treatment of when JAKIM certification makes economic sense and when halal-friendly without certification is the better play, see our guide to halal certification for Malaysian F&B. The short version: if your hero menu items can run without pork or alcohol and your neighbourhood is more than 30 percent Muslim, certify. If your hero items depend on pork, alcohol or non-halal-supplier ingredients, do not.

2. Liquor License (RM2,400 to RM7,500 per year)

If you serve alcohol, you need a liquor license from your local council. Two types matter for F&B:

• Type A (full retail). Allows on-premise consumption and takeaway. RM5,000 to RM7,500 per year depending on council. Renewal each year.
• Type B (consumption only). Allows on-premise consumption only, no takeaway. RM2,400 to RM4,800 per year.

Restrictions vary sharply by council and even by district within a council. DBKL is conservative on new liquor licenses in residential-adjacent areas. MBPJ has had quotas on new licenses in specific Petaling Jaya sections. Selangor state has periodically tightened rules on Muslim-majority districts. Penang island tends to be more permissive than the mainland councils. Confirm with the council before signing the tenancy if alcohol is core to your concept; finding out after the fact that the unit cannot get a liquor license is a common and expensive surprise.

Note: you cannot hold both JAKIM halal certification and a liquor license at the same outlet. Pick one. The few operators who run both halal and non-halal concepts do so with completely separate outlets, separate kitchens and separate SSM entities.

3. Signboard License (RM200 to RM2,000)

Lesen Iklan, issued by the local council, regulates any external signage including your shopfront fascia, blade signs, freestanding pylons and any backlit boxes. The fee scales with sign area and is renewed annually. Typical range:

• Small fascia sign under 3 square meters: RM200 to RM400
• Standard cafe fascia 3 to 6 square meters: RM400 to RM800
• Restaurant fascia with side blade signage: RM800 to RM1,500
• Large illuminated signage above 10 square meters: RM1,500 to RM2,000

The council inspects sign content as well as size. Bilingual signage (Bahasa Malaysia plus English or Chinese) is required in some local authority zones, with BM occupying at least equal prominence. Get the signage design approved before the printer fabricates; reworks are costly.

4. SOCSO, EPF and EIS Registration (free to register, ongoing contributions)

If you hire any staff, you must register the business as an employer with three statutory bodies:

• EPF (KWSP). Employees Provident Fund, the retirement savings scheme. Employer contribution 13 percent of monthly wage for staff under RM5,000, 12 percent above. Employee contribution 11 percent. Mandatory for Malaysian staff, optional for foreign staff (different scheme).
• SOCSO (PERKESO). Social security, covering work injury and invalidity. Employer pays 1.75 percent, employee pays 0.5 percent of wages.
• EIS. Employment Insurance System, covering retrenchment. Both employer and employee pay 0.2 percent.

Registration as an employer is free at all three agencies and can be done online. Ongoing contributions are due monthly, usually by the 15th of the following month. Missing contributions trigger penalties and can result in directors being personally pursued for the arrears.

Operators who try to skip licenses save money in year 1 and lose everything in year 2 when an inspection shows up. The compound penalties plus the closure order plus the lost rent during the shutdown eclipse any savings, and a director can carry the bad record into their next venture.

SST registration (mandatory above RM1.5M annual revenue)

Sales and Service Tax registration is mandatory once your trailing 12-month revenue crosses RM1.5 million, or once your projected next 12-month revenue is expected to cross RM1.5 million. For F&B service, the SST rate is 8 percent on the food and beverage portion of the bill.

Register with the Royal Malaysian Customs Department (RMCD) within 30 days of crossing the threshold. The registration is free but ongoing compliance has costs: bi-monthly SST returns, accounting system configured for SST tagging, and your POS or QR menu system needs to be set up to itemize SST on receipts.

Many operators try to stay just under the threshold to avoid the administration. This usually backfires: customers and corporate clients prefer SST-registered venues for billing purposes, and growing past the threshold without proper setup creates a messy 30-day catch-up. Better to register early when revenue is climbing reliably.

The sequencing order: which license to apply for first

This is where most operators waste time. The right order:

1. Week 1. SSM business registration. Sole prop or Sdn Bhd. Nothing else moves until this is done.
2. Week 1 to 2. Sign the tenancy. Stamp at LHDN if your council requires it. Open business bank account using the SSM certificate.
3. Week 2 to 4. Engage a contractor for fit-out. Submit BOMBA application in parallel with submitting the council premise license application.
4. Week 3 onwards. Send the founding team for typhoid jabs and Food Handler course. Cheap and fast, do it early.
5. Week 4 to 6. Submit signboard license application once signage design is finalized. Submit JAKIM halal application if going certified (this one runs in parallel for 3 to 6 months).
6. Week 6 to 8. BOMBA first inspection. Fix defects. Re-inspect.
7. Week 8 to 12. Council premise license inspection. Fix defects. Re-inspect. Conditional premise license issued if available.
8. Week 12 to 16. Final premise license. Open for business. JAKIM audit continues if applicable.
9. Once revenue trajectory is clear. Register for SOCSO, EPF, EIS the day before the first hire. Register for SST the month you can credibly project crossing the threshold.

The most common sequencing mistake: starting BOMBA after the council inspection rejects you for missing fire clearance. BOMBA needs to be in motion by week 3 or 4, not week 8. The second most common mistake: signing the tenancy before confirming with the council that the unit's land use category permits F&B. Some shoplots are zoned office or retail only, and converting them is a separate, slower process.

Cost summary by venue type

Total licensing cost from SSM to opening, including the BOMBA-related fit-out items and first-year fees, varies sharply by venue type:

• Kopitiam (small, simple kitchen, no alcohol). RM3,000 to RM8,000 all-in for SSM (sole prop), council premise, BOMBA (no sprinkler), MOH for 4 to 6 staff, signboard. Skip JAKIM in the first year if budget is tight; halal-friendly with explicit signage works for most kopitiam clientele.
• Cafe (medium, espresso bar, no alcohol). RM5,000 to RM12,000 for the same stack plus first-year JAKIM if going certified. The big swing factor is BOMBA fit-out if the unit needs extinguishers, signage and minor electrical upgrades.
• Restaurant (full kitchen, hood, gas, no alcohol). RM8,000 to RM18,000. BOMBA suppression system on the kitchen hood drives the upper end. JAKIM if certified.
• Restaurant with alcohol service. RM12,000 to RM25,000. Adds the liquor license. Removes the JAKIM option. Some councils impose additional public liability insurance requirements for liquor-licensed venues which add another RM1,500 to RM3,000 annually.

These ranges are for single-outlet venues. Multi-outlet chains save on SSM (one entity) but pay per-outlet for council, BOMBA, signboard and JAKIM. Budget about 70 percent of single-outlet cost for each additional outlet after the first.

For a full opening budget that incorporates licensing alongside fit-out, equipment, rent deposit and working capital, see our line-by-line opening budget for a Klang Valley cafe.

Timeline: typical 10 to 16 weeks from SSM to full operations

From the day you register with SSM to the day you legitimately open the doors, expect 10 to 16 weeks. The breakdown:

• Weeks 1 to 3: SSM, tenancy, bank account, fit-out start
• Weeks 3 to 8: Fit-out in parallel with BOMBA and council applications, MOH paperwork for the team
• Weeks 6 to 12: Inspections, defect rectification, re-inspections
• Weeks 10 to 14: Final approvals, signboard installation, soft open under conditional license if available
• Weeks 14 to 16: Full premise license issued, full operations

JAKIM halal certification, if pursued, continues for 3 to 6 months in parallel. You can open without it and add it once granted.

Optimistic timelines (8 to 10 weeks) are possible if the council is fast, the unit is already fit-out-ready, and the BOMBA inspection passes the first time. Pessimistic timelines (18 to 24 weeks) happen when the unit needs structural fit-out work, the council inspector is on leave, or the BOMBA suppression system has a supplier delay. Budget your runway and your rent on the pessimistic case.

Common mistakes that delay licensing

The mistakes that consistently push timelines past 16 weeks:

• Signing the tenancy before checking the land use category. Some shoplots are zoned office or retail only. Conversion takes another 8 to 12 weeks. Verify with the council planning department before signing.
• Starting BOMBA after the council rejects you. Run BOMBA in parallel from week 3, not sequentially from week 8. The council will not issue the premise license until BOMBA clears.
• Under-spec'ing fire safety in the fit-out. Operators who try to use domestic-grade extinguishers, undersized ductwork or non-fire-rated partitions fail BOMBA and have to redo the fit-out. Spec to commercial standards from day one.
• Hiring before SOCSO and EPF registration. An employee can sue for unregistered contributions even years later. Register the day before the first hire. The registration itself is free.
• Forgetting the typhoid certificates for new hires. A health officer who visits on a quiet Tuesday will check the binder. Missing certificates trigger compound notices.
• Putting up signage before the signboard license is approved. Some councils fine for unapproved signage and require removal before reapplication. Submit the application before fabricating the sign.
• Treating JAKIM as a marketing exercise rather than an operational one. Halal certification reshapes the supplier list, the kitchen layout and the staff hiring. Operators who underestimate the operational lift fail the audit and lose the application fee. See our halal cert guide for the decision framework.
• Skipping the SST registration once revenue clears RM1.5M. Backdated SST plus penalties is one of the most expensive compliance failures. Register the month you can credibly project crossing the threshold.

Renewal cadence

Once you are licensed, most items renew annually. The cadence:

• Annual: SSM (sole prop), council premise license, signboard license, liquor license, JAKIM halal reaudit, public liability insurance if required by the council.
• Annual to biennial: BOMBA recertification (most councils require annual; some accept biennial for low-risk venues).
• Every 3 years: Typhoid certificates for food handlers.
• One-off (no renewal): SSM Sdn Bhd registration (but annual return filing required), Food Handler course completion (lifetime as long as typhoid stays current), SOCSO/EPF/EIS employer registration.
• Bi-monthly: SST returns to RMCD if registered.

Put every renewal date in a calendar reminder 60 days before the deadline. Most councils send no reminder. Letting a premise license lapse means operating illegally; letting a BOMBA cert lapse can invalidate your public liability insurance if there is a fire incident. The compliance calendar is the cheapest insurance an operator can build.

For multi-outlet operators, build a single licensing dashboard that tracks each outlet's renewal status. A spreadsheet works fine for two to three outlets. Above that, integrate the dates into the same operational system that runs your menu and your team paperwork.