RMiT or TR PD?
Find out which applies to you
Bank Negara issued a revised RMiT policy document on 28 November 2025 and a separate Technology Requirements policy for payment services regulatees on 12 March 2026. Which one governs you depends on what you are licensed as and how much you process. Three questions, no email needed for the answer.
How to read this. This tool follows the applicability and tiering clauses in the two policy documents as issued — RMiT paragraphs 2.1 to 2.2 and TR PD paragraphs 2.1 to 2.6 — and every obligation it lists carries the paragraph it came from so you can check it against the source. It is a starting point for scoping, not legal or regulatory advice, and the policy documents themselves prevail. Some determinations sit with BNM rather than with you: aggregate market data for non-bank merchant acquirers is not published, and BNM notifies institutions directly when they meet the 5% threshold. Where the answer matters, engage your IT Supervisor. ResiliencePro is a product of BlueAura Technology Sdn Bhd.