How to Transfer .MY Domain Registrant Ownership via MYNIC Selfcare

The "Agency Has Gone Silent" Crisis

It is one of the most frustrating scenarios for a Malaysian business owner: You hired a web design agency three years ago to build your corporate website. They registered your prestigious companyname.com.my or brand.my domain name. Now, you want to redesign the website or switch to a new hosting provider, but your previous agency has stopped responding to WhatsApp messages, their office phone is disconnected, or they are demanding a RM3,000 "administrative release fee" to surrender your domain.

Because .MY domains are country-code top-level domains (ccTLDs) regulated by MYNIC Berhad (an agency under the Ministry of Digital), legal ownership is strictly tied to the verified Registrant Organization (SSM registration number), not simply whichever agency created the account.

In this technical guide, we provide the exact step-by-step procedure to reclaim, transfer, and consolidate your .MY domain registrant ownership using the official MYNIC Selfcare Portal (selfcare.mynic.my), even if your previous web agency is completely unresponsive.

---

Understanding MYNIC Contact Roles & Hierarchy

To successfully transfer a domain, you must understand the distinction between the four contact roles registered in MYNIC's registry:

graph TD
    A[MYNIC Domain Record] --> B[1. Registrant: Legal Owner SSM Entity]
    A --> C[2. Administrative Contact: Approves Transfers & Changes]
    A --> D[3. Technical Contact: Configures DNS & Nameservers]
    A --> E[4. Billing Contact: Receives Renewal Invoices]
    A --> F[5. Registrar / Reseller: Exabytes, Shinjiru, ServerFreak]
    
    style B fill:#10b981,stroke:#065f46,stroke-width:2px,color:#fff
    style C fill:#3b82f6,stroke:#1d4ed8,stroke-width:2px,color:#fff

1. Registrant (The Legal Owner): The organization or individual legally recognized as the owner of the domain. For commercial .com.my and .my domains, this must match your official SSM company name and registration number (e.g. 202401012345 (1234567-X)).
2. Administrative Contact (Admin Handle): The designated individual authorized by the Registrant to approve transfers, registrant changes, and modifications.
3. Technical Contact (Tech Handle): Authorized to manage DNS Name Servers (e.g., pointing nameservers to Cloudflare or cPanel).
4. Billing Contact (Bill Handle): Authorized to receive and pay annual renewal invoices.
5. Reseller / Registrar: The commercial registrar (such as Exabytes, Shinjiru, or ServerFreak) through whom the domain was purchased.

---

Step-by-Step Procedure to Transfer .MY Registrant Ownership

Step 1: Query WHOIS Data via CLI to Audit Current Ownership

Before taking action, query the official MYNIC WHOIS database to identify how the domain is currently registered.

# Query MYNIC WHOIS registry from terminal
whois -h whois.mynic.my yourcompany.com.my

Look closely at the output:

• If [Registrant] matches your official SSM company name, you are the undisputed legal owner, even if the Admin Contact is your former agency.
• If [Registrant] lists the agency's company name, you must initiate a formal Change of Registrant (Transfer of Ownership).

Step 2: Register a Corporate Account in MYNIC Selfcare

1. Navigate to the official portal: https://selfcare.mynic.my.
2. Click Register as New User.
3. Register using your company's official corporate email (e.g., management@yourcompany.com.my or a permanent director's email, not a temporary personal Gmail address).
4. Verify your identity by uploading your company's SSM Corporate Profile (e-Info / Borang 9/24/49) and the director's MyKad/Passport.

sequenceDiagram
    autonumber
    actor Client as Business Owner (SSM Entity)
    participant MYNIC as MYNIC Selfcare Registry
    participant OldAgency as Former Unresponsive Agency
    participant DNS as Cloudflare Enterprise DNS
    
    Client->>MYNIC: Submit Change of Registrant / Auth Code Request
    MYNIC->>OldAgency: Automated 14-Day Notification Loop
    Note over OldAgency: If Old Agency fails to respond or dispute...
    Client->>MYNIC: Submit Statutory Declaration & SSM Form 9/49
    MYNIC-->>Client: Direct Legal Custody Transferred to Client
    Client->>DNS: Point Nameservers with 0 Downtime

Step 3: Scenario A — The Old Agency Is Cooperative (Auth Code / EPP)

If your former agency is willing to hand over access:

1. Ask the agency to log into their registrar portal (or MYNIC Selfcare) and generate the Transfer Authorization Code (EPP Code / Auth Code).
2. Log into your new registrar (or MYNIC Selfcare) and select Transfer In Domain.
3. Input the domain name and paste the Auth Code.
4. The transfer completes automatically within 24 to 48 hours.

Step 4: Scenario B — The Old Agency Is Hostile or Unresponsive (MYNIC Appeal)

If the former agency ignores your messages or withholds access:

1. Log into your verified MYNIC Selfcare account.
2. Navigate to Domain Management > Dispute / Transfer Assistance.
3. Submit an official MYNIC Transfer of Ownership Appeal accompanied by the following mandatory legal documentation:
   • Letter of Authorization (LOA): Printed on your official company letterhead, signed by an active director, stating that the former agency was engaged solely as a technical contractor and has no legal claim to the domain asset.
   • Full SSM Corporate Profile (e-Info): Dated within the last 30 days, listing the active directors and registered office address.
   • Director's NRIC Copy: Front and back of the signing director's MyKad.
4. MYNIC's legal registry team will issue a formal 14-day statutory notification to the existing Admin Contact handle. If the former agency fails to prove legitimate trademark/legal ownership (which they cannot, since your SSM matches the brand), MYNIC will forcibly reassign the Administrative and Registrant handles directly to your verified corporate Selfcare account.

Step 5: Updating DNS Nameservers with Zero Downtime

Once you have secured administrative control in MYNIC, update the authoritative Name Servers to a resilient edge provider like Cloudflare:

# Audit active DNS records before changing nameservers to avoid email disruption
dig yourcompany.com.my ANY +noall +answer
dig yourcompany.com.my MX +short
dig yourcompany.com.my TXT +short

1. Duplicate all existing A, CNAME, MX (Google Workspace/Microsoft 365), SPF, DKIM, and DMARC records into your new Cloudflare DNS zone.
2. In MYNIC Selfcare, navigate to Modify Name Server and enter the new Cloudflare nameservers (e.g., ns1.cloudflare.com, ns2.cloudflare.com).
3. Save changes. DNS propagation for .MY domains typically completes within 2 to 6 hours across local Malaysian Internet Service Providers (TM Unifi, Maxis, CelcomDigi, Time dotCom).

---

Essential CLI Diagnostics for Domain Custody

Sysadmins and engineering teams should verify domain propagation and delegation integrity using standard terminal commands:

# 1. Verify authoritative nameserver delegation at the root .my servers
dig NS yourcompany.com.my @a.root-servers.my +trace

# 2. Check the Start of Authority (SOA) record serial number
dig SOA yourcompany.com.my +multiline

# 3. Confirm mail routing (MX) is intact post-transfer
dig MX yourcompany.com.my +short

---

Reclaim and Secure Your Assets with JagaWeb

Never allow an external agency, freelancer, or third-party contractor to hold your primary commercial domain name hostage. Your domain is the legal intellectual property and commercial lifeblood of your company.

At JagaWeb, our Ownership & Access Review service is specifically engineered to resolve domain custody disputes, recover locked credentials, audit DNS configurations, and transition your web infrastructure into 100% clean corporate custody.

Our Transparent Pricing:

• Ownership & Access Review: RM5,000 fixed (complete recovery of locked domains, DNS zones, hosting, and Git source code).
• Managed Care Plan: RM450/month (staged updates, Cloudflare WAF, 3-2-1 offsite backups, 24/7 synthetic monitoring, 1-hour critical response SLA).
• Monthly System Improvement: From RM13,000/month (continuous feature sprints and engineering support).
• Fixed-Scope Re-Architecture: From RM30,000 (bespoke enterprise builds).

Contact JagaWeb today and let our technical team help you reclaim full legal ownership of your .MY domain estate.