SST on Websites and Digital Services: What a Malaysian Small Business Actually Needs to Know

Two different questions hiding inside "does SST apply to my website"

A small business owner asking whether SST applies to "the website" is usually really asking two different things at once: does SST apply to what I pay a developer or software provider for the site itself, and does SST apply to what I sell through it? Malaysia's Sales and Service Tax doesn't answer both with the same rule, and mixing them up is how a business ends up either under-charging, over-charging, or missing a registration obligation it should have caught. What follows is a plain-language explainer of the current rules as published by the Royal Malaysian Customs Department (RMCD), not tax advice — for anything specific to your own business, RMCD's MySST portal and a licensed tax agent are the right places to confirm your position. Everything below is current as of 31 August 2026 and is worth re-checking directly against MySST, because SST's rate and scope have changed more than once in recent years.

The rate that actually applies today

The standard service tax rate is 8%, in effect since 1 March 2024, up from the previous 6%. A specific set of service categories was deliberately left out of that increase and stays at 6%: food and beverage services, telecommunications, parking, and logistics services. Credit and charge card services sit outside both figures entirely, taxed at a flat RM25 per card per year rather than a percentage of value. If your business provides or buys IT, web development, or other digital or professional services, none of those carve-outs apply — those services moved to the 8% rate along with the majority of taxable services when the rate changed.

Do you actually need to register?

Service tax isn't automatic just because a business sells services. Registration becomes mandatory once a business's taxable service turnover crosses RM500,000 within a 12-month period — the threshold RMCD uses as its standard baseline across most categories of taxable service. Two categories were moved to a higher threshold from mid-2025 — construction work and private healthcare, both to RM1,500,000. Rental and leasing services and financial services stayed at RM500,000, as did IT and digital services, so RM500,000 is still the figure that applies to a web design, development or digital agency, and to most other service businesses. Below that threshold, registration is voluntary, not required, and a business that isn't registered has no basis to add SST to an invoice at all. Charging it anyway without a registration number isn't a minor paperwork slip; it's charging a tax you have no legal authority to collect.

The part that actually catches people out: "digital services" is a separate regime

There are two distinct rulebooks that both get shortened to "SST on digital services" in conversation, and confusing them is a common source of error.

The first is ordinary domestic Service Tax, which applies to a Malaysian business selling IT, web or digital services to customers here, once it crosses the RM500,000 threshold, at the standard 8% rate described above. This is the regime that applies to a local web development or IT agency's own invoices.

The second is a distinct regime for foreign digital service providers — companies outside Malaysia selling software subscriptions, cloud services, streaming, online advertising and similar directly to Malaysian customers. These providers, once they cross the same RM500,000 threshold measured on their Malaysian revenue, must register as a Foreign Registered Person (FRP) through RMCD's dedicated MySToDS system and charge service tax on their invoices to Malaysian customers. This regime rose from 6% to 8% on the same date as the domestic rate change, 1 March 2024. In practice, this is why an invoice from an overseas software or advertising platform may show a service tax line even though the seller has no Malaysian office: it's the foreign provider's own registration obligation being reflected on the bill, not something a Malaysian business buying that single service typically has to self-account for separately.

What your invoice legally has to show

If your business is SST-registered, an invoice for a taxable service isn't just any document with a total on it. The Service Tax Regulations 2018 set out particulars an invoice must contain: an invoice serial number, the date, the registered business's name, address and service tax registration number, a description sufficient to identify the taxable service provided, any discount given, the amount payable excluding tax with the tax rate and the tax amount shown as a separate figure, and the total amount payable including tax — and where any amount is expressed in a foreign currency, it must also be shown converted to ringgit at the prevailing exchange rate. The invoice can be issued electronically, and must be in Bahasa Malaysia or English. A website checkout or invoicing system that only ever prints a single lump total, with no breakdown of the pre-tax amount and the tax charged as a separate line, doesn't satisfy this on its own.

Inclusive or exclusive pricing: there isn't one mandatory answer

Nothing in the rules above forces a business to display a listed or quoted price as SST-inclusive or SST-exclusive — both are common, and the right choice usually comes down to what your customers expect. Retail pricing aimed at consumers is more often shown inclusive, so there's no surprise at checkout; B2B quotes are more often shown exclusive, with tax added at invoicing to match how procurement teams expect to see figures broken out. What isn't optional is what happens at the invoice itself: whichever way the price was displayed or quoted, the actual invoice issued needs to break the pre-tax amount, the rate, and the tax amount out separately, per the particulars above. If a website only ever generates one all-in figure and the system behind it can't produce that breakdown at the point an invoice is created, that's the gap worth fixing, not the marketing price itself.

What this article deliberately doesn't cover

This is a plain explanation of the current rate, threshold and invoice requirements as published by RMCD, not a substitute for professional advice, and it doesn't attempt to cover every exemption, group relief, or edge case set out in the Service Tax Act 2018. If your business is close to the RM500,000 threshold, sells a mix of taxable and non-taxable services, or has any doubt about its registration position, that's a conversation for a licensed tax agent or RMCD directly — not something to settle from a blog post, including this one.

Where this connects back to your website

Most of what goes wrong here isn't the tax law itself, it's the website and checkout not being built to reflect it: a tax setting that only ever shows one lump figure, an invoice template with no separate tax line, or SST simply switched off in a plugin because nobody revisited it after registering. If you want someone to check how your site currently calculates and displays SST at checkout and on the invoices it generates, that's the kind of control point covered in JagaWeb's Essential System Review (RM1,500, reduced to RM999 until 16 September 2026, excluding SST) — a fixed-scope technical review, not tax advice, and one option among several if you want an outside look at what your site is actually doing.