Legal and Regulatory Annex: Keystone for S P Setia

1. Purpose and framing

This annex is a starting point for S P Setia's legal counsel and Tech and Innovation Council, not a finished legal position. It maps each rung of the Keystone financing-recovery ladder to the Malaysian statutes, case law, and regulators that appear most relevant, states plainly where the analysis is confident and where it is not, and lists the questions counsel should resolve before Phase 2 proceeds. Nothing here is a legal opinion, and nothing here should be read as one.

Keystone is designed for compliance with the Housing Development (Control and Licensing) Act 1966, the Moneylenders Act 1951, the incoming Consumer Credit Act 2025, the Personal Data Protection Act 2010 as amended, and the tax and Shariah frameworks discussed below. Design intent is not the same as legal certainty. Several of the boundaries below turn on facts, exact SPV documentation, exact rent-credit mechanics, exact data flows, that only counsel reviewing final drafts can confirm.

Phase 2, the allocation of completed unsold units to the Islamic SPV for the rent-to-own bridge, is explicitly gated on one named legal opinion commissioned in week 1 of the engagement. Phase 1, rung 1 packaging to SJKP-MADANI and participating banks, carries materially lower legal exposure: Keystone assembles and formats an application into an existing government guarantee and bank programme, and does not itself lend, guarantee, or hold financing risk at any point.

2. Ladder-to-law mapping

3. Per-pathway deep dives

1. Rung 2 and the Housing Development (Control and Licensing) Act 1966

Loh Tina & Ors v Kemuning Setia Sdn Bhd & Ors and Another Appeal [2020] 7 CLJ 720 (also [2020] 6 MLJ 191) was decided by the Court of Appeal, Putrajaya, on 4 June 2020. The developer had modified the prescribed statutory sale and purchase form under Schedule G, without the ministerial approval the Act and Regulations require, in a scheme that functioned as a private lease arrangement rather than the ordinary staged-payment sale. The Court of Appeal held the modifications void and the purchasers entitled to enforce their rights as though the agreement had been executed in the unmodified prescribed form. The proposition is narrow but firm: a developer cannot substitute a private lease or rental scheme for the statutory sale form when selling housing accommodation, however the substitution is dressed.

Rung 2 is scoped deliberately around this line. It applies only to units that are already complete, hold a Certificate of Completion and Compliance, and sit unsold in Setia's inventory. The tenancy is a genuine rental of a finished building, and ownership transfers only when the buyer exercises the option, at which point a normal sale and purchase agreement is executed with the customary 10% deposit. No stage asks a buyer to accept a lease in place of the statutory sale form for a unit under construction, and no clause is intended to bypass Schedule G or H.

One point needs the opinion's confirmation rather than assumption: whether the Act and Regulations apply the full staged-payment Schedule G or H regime, or a lighter completed-unit regime, to a licensed developer's sale of already-completed, CCC-issued stock with immediate vacant possession. Rung 2 documentation, including the option-exercise SPA, must be built against whichever regime actually governs that fact pattern.

2. Rung 2 and the Moneylenders Act 1951

Three cases are relevant, in chronological rather than the order sometimes assumed. Triple Zest Trading & Suppliers & 2 Ors v Applied Business Technologies Sdn Bhd [2023] 8 AMR 225, a Federal Court decision, is the foundational authority: an unlicensed moneylender cannot recover either interest or principal where a purported sale-and-buyback arrangement in fact disguises an interest-bearing loan. Butterfly Capital Management Co Ltd v Wang Hsiu Ying & Anor [2024] CLJU 2647, a High Court decision, applied the same reasoning to strike down a put option agreement, a result some practitioners flagged as risking the mischaracterisation of genuine commercial option structures as disguised lending. AJ Kasturi Sdn Bhd & Anor v Pannirselvam & Ors, Court of Appeal, 21 August 2025, is the most directly on point: two companies, needing urgent funds for a 2014 property acquisition after a bank loan was rejected, obtained financing from a private lender through 16 land-transfer SPAs structured as security for loans carrying 4% monthly interest. The Court of Appeal held the 16 agreements were a sham disguising unlicensed moneylending, annulled the transfers, and awarded damages against the lender.

All three cases share a fact pattern: a third-party private lender advances cash to a borrower against security over an asset the borrower already owns, with a "sale" or option structured to camouflage debt recovery. Rung 2 differs on its face. S P Setia is the seller and lessor of its own newly built, unsold inventory, not a third-party lender; no cash is advanced from Keystone, Setia, or the SPV to the buyer; the buyer pays rent for a unit it does not yet own, and a share is credited toward the eventual purchase price if the option is exercised. There is no antecedent debt being disguised.

The SPV's funding role does introduce a financing element a court could scrutinise under the same lens, particularly how the option premium is priced and whether rent credits function economically like loan repayments. This is the boundary the commissioned opinion must test against the final SPV and rent-credit documentation.

3. Consumer Credit Act 2025

This section carries real weight and is written without guessing. The Consumer Credit Act 2025 was gazetted on 31 December 2025 and came into force on 1 March 2026, establishing the Consumer Credit Commission (CCC) as regulator for non-bank credit and credit-adjacent services. Its stated scope covers Buy Now Pay Later schemes, non-bank leasing, non-bank factoring, non-bank hire purchase, credit sales, licensed moneylending, pawnbroking, debt collection agencies, impaired-loan or impaired-financing acquisition, and debt counselling and management services. Entities already licensed and regulated by Bank Negara Malaysia as banks or financial institutions are carved out. From 1 June 2026, BNPL, leasing, and factoring providers must hold a CCC licence, following a transition window; the exact start date of that window is UNVERIFIED from the sources reviewed here and should be confirmed against the Act's commencement schedule.

The honest assessment: rung 2's core mechanic, a tenancy where a portion of rent is credited toward a future purchase price, sits close to categories the Act names, notably non-bank leasing and credit sales. Whether it is actually caught turns on statutory definitions this annex could not verify at operative-section level: what "credit," "leasing," and "credit sale" mean precisely, and whether those definitions are confined to goods and equipment, the pattern in most prior leasing and factoring regulation, or extend to real property tenancies of the kind rung 2 uses. The opinion must obtain and read the Act's operative provisions directly, not secondary summaries, and answer: whether rung 2's structure falls within "leasing" or "credit sale" as defined; whether the SPV would need CCC registration or licensing before Phase 2 launches; and whether any exemption exists where the "lessor" is the original developer disposing of its own completed inventory rather than a third-party finance provider. Do not treat this as resolved in Keystone's favour until the opinion says so.

4. Tax

Stamp duty on the tenancy instrument is charged under Item 49, First Schedule, Stamp Act 1949, at tiered rates per RM250 of annual rent that rise with the lease term. The Finance Act 2024 is reported to have removed the previous RM2,400 annual-rent exemption with effect from 1 January 2025, so the full annual rent on a rung 2 tenancy should be assumed dutiable; the opinion should confirm the current rate table and any exemption against the Act as amended. The eventual SPA at option exercise attracts its own ad valorem conveyance duty under the Stamp Act's First Schedule; whether any first-time-homebuyer exemption order applies to a rung 2 graduate's SPA depends on that order's exact eligibility wording, which the opinion should check against the option-exercise structure specifically.

On income tax, gains on a licensed developer's sale of its own building stock are generally treated as trading or business income under the Income Tax Act 1967 rather than a capital gain under the Real Property Gains Tax Act 1976, since a developer's unsold inventory typically fails the badges-of-trade tests pointing toward RPGT treatment. This is likely Setia's existing treatment for completed stock regardless of Keystone. The genuinely open question is timing and character within rung 2: whether the option premium is assessable on receipt or deferred until exercise or lapse, and whether accrued rent credits should be recognised as rental income when earned, adjusted later against sale consideration, or reclassified retrospectively as part of the sale price. Either mischaracterisation could create a timing mismatch across financial years that the opinion, with Setia's tax advisers, needs to resolve.

5. Data

The Personal Data Protection Act 2010 was amended by the Personal Data Protection (Amendment) Act 2024, gazetted October 2024, brought into force in three phases: 1 January 2025, 1 April 2025, and 1 June 2025. The material changes: mandatory appointment of a Data Protection Officer by every data controller and processor regardless of size; mandatory breach notification to the Commissioner within 72 hours, and to affected data subjects where significant harm is likely; direct statutory obligations on data processors, not only controllers; replacement of the prior cross-border transfer "whitelist" with a test based on substantially similar law or adequate protection, generally requiring a documented transfer impact assessment; and a new data portability right from 1 June 2025.

Keystone's consent-first intake, where a buyer explicitly consents before bank statements or CCRIS-adjacent data are processed, and its per-buyer audit trail, address purpose limitation and accountability directly. A named Data Protection Officer should be designated for the Keystone deployment. Retention of financial documents should be time-boxed and stated plainly in the consent notice, not held indefinitely. Any AI-assisted statement parsing that routes buyer data to a processor outside Malaysia must be assessed under the amended cross-border transfer test, which may require a transfer impact assessment. SJKP and bank data-sharing is a second, onward disclosure needing its own named legal basis distinct from the intake consent.

6. Rung 1 licensing and the Shariah SPV

The Financial Services Act 2013 regulates "financial advisory business" as an activity requiring Bank Negara Malaysia approval, and that definition, as reviewed for this annex, concerns advising on and arranging contracts of insurance and takaful rather than general credit or loan brokerage. On its face, fee-based preparation of a bankability dossier, assembling and formatting a buyer's existing income and commitment data for a bank or SJKP application, is closer to document and administrative assistance than to advising on insurance, and does not appear to fall within the FSA's financial-advisory licensing regime. Whether a separate licence exists in Malaysia for mortgage or loan brokerage specifically is UNVERIFIED from the sources reviewed here and should be confirmed against the Act's exact text and BNM licensing guidance. The opinion should also check whether the Consumer Credit Act 2025's credit-service-provider registration categories could reach dossier-preparation services by analogy, even though rung 1 does not itself lend, guarantee, or buy debt.

For the SPV, the two candidate Shariah structures, Ijarah Muntahia Bittamleek (a lease ending in ownership) and Musharakah Mutanaqisah (a diminishing partnership combining musharakah, ijarah, and sale), are both established structures with Bank Negara Malaysia Shariah policy documents setting out Shariah and operational requirements, including a Musyarakah policy document effective from 1 June 2016. These BNM documents legally bind licensed Islamic financial institutions under the Islamic Financial Services Act 2013; a standalone SPV outside that licensed perimeter is not directly bound, but this annex recommends treating them as the reference standard regardless. A registered Shariah adviser should be appointed to the SPV. The Securities Commission maintains a public list of Registered Shariah Advisers for Islamic capital market activities; whether the SPV triggers that specific registration regime, or an equivalent qualified scholar outside the list is sufficient, is a governance question the opinion should settle.

4. Open questions for S P Setia's counsel

1. Which HDA 1966 regime, full staged Schedule G or H or a completed-unit exemption, governs Setia's sale of already-completed, CCC-issued unsold stock, and does the rung 2 option-exercise SPA satisfy it?
2. Reviewing the rung 2 tenancy and option documentation against the Loh Tina reasoning, is any clause capable of being read as substituting a private arrangement for the statutory sale form?
3. Assessing rung 2 against the Moneylenders Act 1951 and the AJ Kasturi, Triple Zest, and Butterfly Capital line, does the rent-credit and option-premium mechanic risk being read as disguised loan repayment?
4. Having reviewed the Consumer Credit Act 2025's operative provisions directly, does rung 2 fall within "leasing," "credit sale," or another regulated category, and would the SPV need Consumer Credit Commission registration before Phase 2 launches?
5. What is the correct stamp duty treatment of the tenancy instrument and option-exercise SPA, and does any first-time-homebuyer exemption apply to a rung 2 graduate?
6. What is the correct income tax timing treatment of the option premium and accrued rent credits?
7. What cross-border transfer safeguards, including any transfer impact assessment, are required under the amended PDPA before AI-assisted statement parsing goes live on Setia buyer data?
8. Does fee-based bankability-dossier preparation under rung 1 sit outside the FSA 2013's financial-advisory regime and the Consumer Credit Act's credit-service-provider categories, and is the proposed Shariah structure and adviser appointment for the SPV sufficient?