Skip to content
jagaweb.Book the Review
Website Ownership & Asset Control

Registrant, Admin, Billing, Technical: Who Actually Controls a .my Domain

5 min readBy JagaWeb

A plain explanation of the four contact roles on a Malaysian domain record, why the registrant is the one that counts, and how to verify yours.

Four names, one domain, and only one of them owns it

Look up almost any .my domain and you'll find four separate contact roles attached to it: Registrant, Administrative Contact, Billing Contact and Technical Contact. Businesses that inherited a domain from a departed employee, a web agency, or a freelancer rarely know which of these four actually matters, and MYNIC — the registry that runs .my — doesn't make the distinction obvious unless you go looking for it.

What each role is for

MYNIC's own documentation on managing a domain sets out the split: MYNIC defines the Administrative Contact as the authorised person able to speak and act on the Registrant's behalf — including changing the Registrant, appointing other contacts, and deleting the domain, the Billing Contact deals with payment and renewal matters, and the Technical Contact is the person responsible for keeping the domain's name servers running correctly. None of these three, on their own, is the owner.

The Registrant is the owner of record — the party who applied to register (or renew) the domain, and whose identity MYNIC's registrant agreement recognises as holding it. Everything else is a delegated contact role sitting on top of that registration.

The catch: the Admin Contact can move the Registrant

This is the part most business owners never check. Under MYNIC's process, changing who the Registrant is can only be submitted by whoever holds the Administrative Contact role, and only before the domain's expiry date. In practical terms, the Administrative Contact isn't just "the person who fields non-technical queries" — they're the one contact who can reassign ownership of the domain itself. If your Administrative Contact is a former employee, a freelancer who's moved on, or an agency's own staff member rather than someone at your company, that's a live control gap, not a formality.

The Billing and Technical contacts matter for day-to-day operations too — an outdated Billing Contact can mean a renewal notice goes to an inbox nobody checks, which is a common way domains lapse — but neither can reassign the domain the way the Administrative Contact can.

A short history: from DMS, to Selfcare, to your registrar

For years, MYNIC managed .my domains through a platform called the Domain Management System (DMS). That system was retired in 2022: MYNIC's own announcement confirms the move to its SELFCARE platform began in April 2022, with the old DMS discontinued shortly after. The replacement portal lives at selfcare.ichoose.my — note that address carefully, because selfcare.mynic.my is not a real MYNIC address, and typing it from memory is a good way to land on the wrong page entirely.

Since then, .my domains have changed again. From 20 June 2024, MYNIC opened .my registrations globally, dropping the previous requirement for a Malaysian presence, and moved the registry's backend to Tucows Registry Services so that any ICANN-accredited registrar worldwide can sell and manage .my domains. In practice, this means how you update your registrant or contact details now depends on which registrar holds your domain: some route changes through MYNIC's SELFCARE portal, others handle registrant and contact updates entirely within their own registrar account or billing system. If you're not sure which applies to your domain, ask your registrar directly rather than guessing from an old screenshot or a forum post.

How to check who's actually on your record

MYNIC runs a public WHOIS lookup at mynic.my/whois, but don't expect it to show everything: MYNIC restricts how much personal contact information its WHOIS service displays, for data privacy reasons. A WHOIS search will usually confirm the domain's status and registrar, but for full contact details — including exactly who's listed as Registrant and Administrative Contact — you'll need to log into the account that actually manages the domain (your registrar's account, or SELFCARE, depending on how it's set up), or ask your registrar to confirm the current record on file.

If you genuinely can't get access to either, MYNIC also provides a Domain Contact Request mechanism, intended for legitimate reasons to reach a domain's contacts without exposing their private details directly — useful if you need to establish who currently controls a domain your business depends on but doesn't formally hold.

Correcting a wrong record

If the check above turns up an Administrative Contact or Registrant that shouldn't still be there — a freelancer's personal email, an agency's staff account, someone who left the company two years ago — it's worth fixing properly rather than leaving it because "it still works." Identify your current registrar first, since that determines the exact process. Update the Administrative Contact before anything else, since that's the role with authority to make further changes. Then update the Registrant itself if it needs to change hands to your company. Be aware that a genuine change of registrant can trigger a 60-day transfer lock under ICANN's Change of Registrant policy, so plan any related registrar move around that timing, not against it.

Why this is worth doing before it becomes urgent

A domain with the wrong Registrant or Administrative Contact usually keeps working fine, right up until the point it doesn't — a renewal gets missed because the Billing Contact is stale, or a former contractor with Administrative access moves the domain somewhere you can't reach. Checking this costs nothing beyond ten minutes with a WHOIS lookup and a call to your registrar.

If you'd rather have someone verify this alongside the rest of your website's ownership and access — hosting, DNS, source code, third-party accounts — JagaWeb's Essential System Review (RM1,500, currently RM999 until 16 September 2026) covers domain and access control as one of its eight checkpoints, with a written report at the end. It's an option worth considering, not a guaranteed fix — get in touch at sales@jagaweb.my or via jagaweb.my if it's useful.

PROTECT YOUR ASSETS

Ready to verify who owns your website?

Replace uncertainty with a decision-ready ownership and access report. The fixed Ownership & Access Review is RM1,500 before SST and includes a 30-day action plan.

WhatsApp