top of page

BNM Debt Collection Submission Framework

BNM Debt Collection Submission Framework | Bestar
BNM Debt Collection Submission Framework | Bestar


BNM Debt Collection Submission Framework


Executing debt recovery or submitting formal regulatory packages to Bank Negara Malaysia (BNM)—such as for outsourcing debt collection or under the Policy Document on Disposal and Purchase of Impaired Loans/Financing (DPIL) or Fair Treatment of Financial Consumers (FTFC)—requires strict alignment with Malaysian legal and regulatory standards.


Below is the foundational framework covering Operational & Legal Documentation and the BNM Submission Package Assembly.  



Part 1: Foundational Operational & Legal Documentation Framework



1. Statutory & Regulatory Anchor


Debt collection activities by Financial Service Providers (FSPs) or appointed collection agencies in Malaysia are governed by:


  • Financial Services Act 2013 (FSA) & Islamic Financial Services Act 2013 (IFSA).  


  • BNM Policy Document on Fair Treatment of Financial Consumers (FTFC) (Enhanced 2024 framework, including Fair Treatment of Vulnerable Consumers under Outcome 7).  


  • BNM Policy Document on Disposal and Purchase of Impaired Loans/Financing (DPIL) (In force June 2024).  


  • BNM Framework on Outsourcing Activities (for third-party collection agencies).


  • Personal Data Protection Act 2010 (PDPA).



2. Core Documentation Inventory

Category

Key Document / Artifact

Scope & BNM Requirement

Governance & Policy

Debt Collection & Recovery Policy (DCRP)

Board-approved policy defining permissible recovery tactics, operating hours (8:00 AM – 9:00 PM), contact frequency caps, and escalation protocols.

Operational SOPs

Standard Operating Procedures (SOPs)

Step-by-step procedures covering skip-tracing, call scripting, field visits, dispute handling, and vulnerable customer protocols.

Legal Agreements

Service Level Agreement (SLA) / Agency Agreement

Contracts with collection agencies containing strict non-harassment clauses, indemnity, audit rights, and PDPA compliance mandates.

Conduct & Ethics

Debt Collectors' Code of Conduct

Signed pledge by agents adhering to fair collection standards (no intimidation, misleading statements, or unauthorized third-party disclosures).

Data Protection

PDPA & Data Sharing Agreements

explicit consent frameworks, data encryption protocols, secure disposal, and data breach notification procedures.

Audit & Record Keeping

Logs & Call Recordings Protocol

Minimum 7-year retention of voice recordings, SMS/WhatsApp logs, payment receipts, and written communications for BNM inspection.



Part 2: BNM Formal Submission Package Assembly


When seeking BNM approval (e.g., under Section 100 FSA / Section 112 IFSA for impaired loan transfers or regulatory outsourcing approval for collection activities), the submission package must be assembled as a cohesive dossier.  


┌────────────────────────────────────────────────────────────────────────┐
│                   BNM SUBMISSION DOSSIER ARCHITECTURE                   │
├────────────────────────────────────────────────────────────────────────┤
│ SECTION A: Executive Summary & Joint Regulatory Application Letter       │
│ SECTION B: Corporate Governance, Board Resolutions & Entity Credentials │
│ SECTION C: Operational Framework & Fair Debt Collection SOPs          │
│ SECTION D: Risk Management, Cybersecurity & Outsourcing Frameworks     │
│ SECTION E: Compliance, Complaints Management & Dispute Resolution      │
│ SECTION F: Statutory Declarations & Legal Appendices                   │
└────────────────────────────────────────────────────────────────────────┘


Section-by-Section Assembly Guide



Section A: Formal Cover & Application Form


  • Joint Application Form / Official Cover Letter: Formally executed under s.100 FSA or s.112 IFSA signed by Managing Director / Chief Executive Officer.  


  • Executive Summary: Overview of the arrangement (loan portfolio size, buyer/agency credentials, operational readiness, rationale, and financial impact).  


  • Regulatory Checklist: Tabulated compliance cross-reference mapping BNM policy document requirements to exact page numbers in the submission package.



Section B: Entity Credentials & Track Record


  • Buyer/Agency Profile: Corporate registration (SSM), ownership structure, and financial track record.  


  • Proven Track Record Evidentiary: Demonstration of minimum 3-5 years' track record in ethical debt management and low complaint ratio.


  • Board & Senior Management Governance:


    • Board Resolution approving the transaction/outsourcing.

    • Curriculum Vitae (CVs) and Fit & Proper Declarations for Key Principal Officers and Head of Recovery/Compliance.



Section C: Operational & Fair Collection Framework


  • SOP on Fair Debt Collection Practices: Comprehensive manual adhering to paragraphs 13.13–13.26 of BNM's DPIL Policy Document:  


    • Mandatory verification of debtor identity prior to disclosing debt details.

    • Restricted call times (0800 hours – 2100 hours local time).

    • Strict prohibition of harassment, threats, physical coercion, or false legal representation.

    • Clear protocol for managing Vulnerable Consumers (elderly, disabled, or financially distressed).  


  • Notice Timeline Compliance Proof: Evidence of 90-day prior written notice sent to borrowers allowing settlement before disposal, and post-completion notification within 7 days.  



Section D: Risk Management & IT Security


  • Data Protection & Cybersecurity Architecture: Encryption standards (in transit and at rest), Access Control Matrix, and Data Center Hosting details.


  • Outsourcing Risk Assessment Report (ORAR): Comprehensive evaluation of operational, legal, reputational, and concentration risks associated with the debt recovery operations.  


  • Business Continuity Plan (BCP) & Disaster Recovery (DR): Disaster recovery test results and backup routines.



Section E: Complaints Handling & Escalation


  • Dedicated Dispute Resolution Unit Setup: Details of dedicated complaints handling team independent of recovery personnel.  


  • Turnaround Times (TAT): Workflow showing acknowledgement within 2-3 business days and resolution within prescribed BNM timelines.  


  • Reporting Mechanism to BNM: Sample monthly/quarterly reporting templates for customer complaints and resolution tracking.



Submission Checklist Quick-Reference


  • [ ] Executed Joint Application Letter (signed by authorized signatory / CEO)

  • [ ] Board Resolutions (Seller and Buyer / Agency)

  • [ ] Legal Opinion / Due Diligence Report verifying regulatory compliance

  • [ ] Debt Recovery SOPs & Staff Training Modules (inclusive of FTFC & Vulnerable Customer guidelines)

  • [ ] Agent Code of Conduct & Standard Employment / Outsourcing Agreements

  • [ ] Complaints Handling Mechanism Framework & Register Format

  • [ ] Data Security & PDPA Audit Compliance Certificate

  • [ ] Sample Written Notices to Debtors (90-day pre-disposal notice & 7-day completion notice)  



Joint Application Form / Official Cover Letter: Formally executed under s.100 FSA or s.112 IFSA signed by Managing Director / Chief Executive Officer  


Here is a formal, production-ready draft for the Joint Application Cover Letter / Cover Submission Document required by Bank Negara Malaysia (BNM).


This draft is structured to meet standard regulatory submission expectations under Section 100 of the Financial Services Act 2013 (FSA) and Section 112 of the Islamic Financial Services Act 2013 (IFSA), incorporating the necessary references to BNM’s Policy Document on Disposal and Purchase of Impaired Loans/Financing (DPIL) and Fair Treatment of Financial Consumers (FTFC).


[ON OFFICIAL LETTERHEAD OF THE LICENSED FINANCIAL INSTITUTION / APPLICANT]


Date: [Date, e.g., 10 August 2026]


To:


The Director

Consumer and Market Conduct Department / Banking Supervision Department

Bank Negara Malaysia

Jalan Dato’ Onn

50480 Kuala Lumpur, Malaysia


SUBJECT: JOINT APPLICATION FOR FORMAL APPROVAL UNDER SECTION 100 OF THE FINANCIAL SERVICES ACT 2013 (FSA) / SECTION 112 OF THE ISLAMIC FINANCIAL SERVICES ACT 2013 (IFSA) – [INSERT PROJECT / TRANSACTION TITLE, E.G., PROPOSED DISPOSAL OF IMPAIRED LOANS/FINANCING PORTFOLIO / OUTSOURCING OF DEBT RECOVERY ACTIVITIES]



1. EXECUTIVE SUMMARY & PURPOSE OF APPLICATION


1.1 The Applicants:


  • Applicant A (Seller/FSP): [Full Name of Financial Institution], Company Registration No.: [●], a licensed financial institution under the FSA/IFSA (“Institution”).


  • Applicant B (Buyer/Purchaser/Agency): [Full Name of Entity], Company Registration No.: [●], a company incorporated under the Companies Act 2016 (“Purchaser/Appointed Agency”).


1.2 Statutory Basis:


This joint application is formally submitted pursuant to Section 100 of the Financial Services Act 2013 and/or Section 112 of the Islamic Financial Services Act 2013, in compliance with BNM’s Policy Document on Disposal and Purchase of Impaired Loans/Financing (DPIL) and BNM's Policy Document on Fair Treatment of Financial Consumers (FTFC).


1.3 Transaction/Scope Overview:


The Applicants hereby seek Bank Negara Malaysia’s formal approval for:


  • [Select applicable: The disposal and transfer of an impaired loan/financing portfolio comprising [●] accounts with a gross carrying amount of RM [●] OR The formal appointment and outsourcing of debt recovery operations to [Applicant B]].


  • Target Completion Date: [Date / Month 202X].



2. SUMMARY OF COMPLIANCE & GOVERNANCE FRAMEWORK


The Applicants confirm that all mandatory prerequisites set forth by BNM have been met, as detailed in the attached submission package:


  • Board Governance & Approvals: The respective Boards of Directors of both Applicant A and Applicant B have formally considered and approved this application (Ref: Section B - Board Resolutions).


  • Fair Debt Collection Practices: Applicant B operates strictly within BNM’s standard operating hours (0800 hours to 2100 hours), maintains non-harassment rules, and enforces dedicated protocols for Vulnerable Financial Consumers under Outcome 7 of the FTFC framework.


  • Data Protection & Cybersecurity: Full compliance with the Personal Data Protection Act 2010 (PDPA) is maintained. Data encryption, secure record retention (minimum 7 years), and access controls are fully operationalized.


  • Debtor Notification Notice Timelines: Applicant A guarantees that all affected borrowers/customers will receive the mandatory 90-day prior written notice before portfolio transfer, followed by the requisite completion notice within seven (7) days post-execution.


3. STRUCTURE OF SUBMISSION DOSSIER


To facilitate BNM’s evaluation, the application dossier is structured as follows:

Section

Title

Key Enclosures / Attachments

Section A

Executive Cover & Regulatory Checklist

This Joint Application Letter & BNM Compliance Cross-Reference Matrix

Section B

Corporate Governance & Track Record

Certified Board Resolutions, SSM Profiles, Fit & Proper Declarations of Key Officers

Section C

Operational Framework & SOPs

Fair Debt Collection Practices SOP, Code of Conduct, Vulnerable Consumer Policy

Section D

Risk Management & IT Security

Outsourcing Risk Assessment Report (ORAR), BCP/DR Plans, PDPA Data Flow Diagram

Section E

Complaints Handling & Oversight

Dispute Resolution Protocols, Escalation Matrix, BNM Reporting Templates

Section F

Legal Drafts & Declarations

Draft Sale & Purchase / Service Level Agreement (SLA), Statutory Declarations



4. JOINT STATUTORY DECLARATION & AUTHORIZED SIGN-OFF


We, the undersigned, in our capacities as the Managing Director / Chief Executive Officer of the respective entities, hereby formally declare that:


  1. The information contained in this joint application and its supporting dossier is true, complete, and accurate to the best of our knowledge and belief.


  2. The operational frameworks and legal agreements governing this transaction fully comply with the Financial Services Act 2013 / Islamic Financial Services Act 2013 and all relevant Policy Documents issued by Bank Negara Malaysia.


  3. Both entities undertake to keep BNM informed immediately of any material updates or changes concerning this submission.


EXECUTED FOR AND ON BEHALF OF THE APPLICANTS:


FOR APPLICANT A (Licensed Financial Institution):



\


[Name of Managing Director / CEO]

Managing Director / Chief Executive Officer

[Full Name of Financial Institution]


Date:


Official Stamp / Common Seal:



FOR APPLICANT B (Purchaser / Appointed Recovery Agency):


\


[Name of Managing Director / CEO]

Managing Director / Chief Executive Officer

[Full Name of Entity/Purchaser]


Date:


Official Stamp / Common Seal:



PRIMARY CONTACT PERSONS FOR THIS SUBMISSION:


  • Applicant A Lead: [Name], [Designation] | Phone: +60 [●] | Email: [email@domain.com]


  • Applicant B Lead: [Name], [Designation] | Phone: +60 [●] | Email: [email@domain.com]



How Bestar Malaysia Masterminds the Bank Negara Malaysia (BNM) Debt Collection Regulatory Framework


Submitting a debt collection framework or an impaired portfolio disposal application to Bank Negara Malaysia (BNM) under Section 100 of the Financial Services Act 2013 (FSA) or Section 112 of the Islamic Financial Services Act 2013 (IFSA) leaves zero margin for error.


Between BNM's Policy Document on Disposal and Purchase of Impaired Loans/Financing (DPIL), the Fair Treatment of Financial Consumers (FTFC) mandate, and the enforcement of the Consumer Credit Act (CCA), Financial Services Providers (FSPs) and corporate recovery firms face an increasingly complex regulatory landscape.


Bestar Malaysia serves as a specialized regulatory advisory partner, helping financial institutions, credit providers, and recovery agencies draft, structure, and submit compliant BNM debt collection frameworks.  



Direct Answer: How Bestar Malaysia Accelerates BNM Approval

Bestar Malaysia streamlines the regulatory submission process by acting as an end-to-end advisory bridge. Bestar structures BNM Submission Dossiers, drafts compliant Debt Recovery Operating Procedures (SOPs), establishes Data Protection & Governance Frameworks, and prepares joint regulatory applications under Section 100 FSA / Section 112 IFSA to ensure fast-track submission readiness.  


Strategic Services Breakdown: What Bestar Delivers

┌─────────────────────────────────────────────────────────────────────────┐
│                    BESTAR MALAYSIA REGULATORY ADVISORY                  │
├─────────────────────────────────────────────────────────────────────────┤
│ 1. Joint Regulatory Application Drafting (s.100 FSA / s.112 IFSA)       │
│ 2. Policy Alignment: DPIL, FTFC, PDPA, & Consumer Credit Act Frameworks │
│ 3. Outsourcing Risk Assessment Reports (ORAR) & BCP/DR Documentation    │
│ 4. Dedicated Complaints Management & BNM Reporting Mechanisms           │
│ 5. Audit-Ready Internal Controls & Fair Debt Collection SOPs            │
└─────────────────────────────────────────────────────────────────────────┘


1. Joint Application & Submission Package Assembly


Submitting under FSA s.100 or IFSA s.112 requires a multi-part regulatory package. Bestar oversees the drafting, verification, and assembly of the entire submission dossier, including:


  • Executive Summary & Joint Cover Letters signed by C-Suite Executives.


  • Regulatory Compliance Cross-Reference Checklists mapping BNM policy guidelines.


  • Fit & Proper Principal Officer Declarations and SSM Corporate Documentation.



2. Fair Debt Collection SOPs & Vulnerable Consumer Protocols


To align with BNM’s Fair Treatment of Financial Consumers (FTFC) framework, Bestar drafts operational SOPs that enforce ethical recovery tactics:


  • Permissible Contact Hours: Enforcing strictly 0800 to 2100 local contact protocols.


  • Vulnerable Consumer Identification: Outcome 7 protocols for managing elderly, disabled, or financially distressed borrowers.


  • Non-Harassment Mandates: Formal codes of conduct preventing unauthorized third-party disclosures or coercive tactics.



3. Risk Management, Outsourcing, & Data Governance


BNM requires financial institutions to prove that outsourcing debt recovery does not compromise data security or operational stability. Bestar develops:


  • Outsourcing Risk Assessment Reports (ORAR): Quantitative and qualitative risk matrices.


  • PDPA & Data Protection Agreements: Encryption standards, access logs, and 7-year voice recording retention protocols.


  • Business Continuity Plans (BCP): Disaster recovery proof and operational backup schedules.



Bestar's Regulatory Compliance Matrix for BNM Submissions


BNM Requirement Category

Regulatory Policy

Bestar’s Advisory Deliverable

Portfolio Disposal Approval

Section 100 FSA / Section 112 IFSA

Formal Joint Application Letter, Business Valuation Support & Legal Dossier Assembly

Ethical Recovery Practices

DPIL Policy Document & FTFC

Comprehensive Fair Debt Collection SOPs & Staff Training Curriculums

Third-Party Outsourcing

Framework on Outsourcing Activities

SLA Drafting, Outsourcing Risk Assessment Report (ORAR), & Vendor Audit Protocols

Customer Protection

Personal Data Protection Act 2010 (PDPA)

End-to-End Data Lifecycle Architecture, Breach Escalation Plan, & Audit Controls

Credit Provider Licensing

Consumer Credit Act 2025/2026

Full Non-Bank Credit Provider & Agency Regulatory Registration Support



Why Financial Institutions Choose Bestar Malaysia


  • End-to-End Execution: From initial corporate structuring with SSM to complex regulatory filings with Bank Negara Malaysia.  

    Bestar Malaysia


  • Cross-Border Expertise: Seamless integration for Singapore-based and regional financial institutions acquiring or managing Malaysian impaired asset portfolios.


  • Audit-Backed Precision: Practical accounting, internal audit, and legal governance integration that satisfies regulator inspection standards.



Frequently Asked Questions (Quick Answer)



What is required for BNM impaired loan disposal approval?


Approval under Section 100 FSA / Section 112 IFSA requires a joint application cover letter, certified board resolutions, an Outsourcing Risk Assessment Report (ORAR), compliant Debt Collection SOPs, 90-day debtor notice timeline proofs, and a dedicated complaints handling structure.



How long does BNM submission assembly take with Bestar?


Depending on portfolio size and internal readiness, Bestar can assemble, audit, and finalize a complete BNM-compliant submission package in 3 to 6 weeks.


Explore next steps for your BNM submission with Bestar:


Draft a Joint Application Letter for BNM Submission

Create a BNM-Compliant Fair Collection SOP Checklist

Schedule a Regulatory Compliance Audit with Bestar



Ready to Accelerate Your Bank Negara Malaysia Regulatory Submission?


Don’t let compliance hurdles or regulatory delays stall your portfolio acquisition or outsourcing strategy. Partner with Bestar Malaysia to structure, audit, and assemble an execution-ready BNM dossier under s.100 FSA / s.112 IFSA.




Ensure 100% Compliance with BNM’s DPIL & FTFC Frameworks.


From drafting Fair Debt Collection SOPs to conducting Outsourcing Risk Assessments (ORAR), Bestar delivers end-to-end regulatory precision.




Streamline Your BNM Submission Package Today.


Talk to our specialized regulatory compliance team at Bestar Malaysia to safeguard your financial operations and guarantee fast-track submission readiness.

Email: admin@bestar-asia.com | Direct Line: +60 3 2289 3138 




Comments


© 2026 by Bestar Malaysia

  • Facebook
  • Twitter
  • LinkedIn
bottom of page