Chinese-backed operators account for 58.4% of Johor’s data centre capacity, per DSET – the Research Institute for Democracy, Society and Emerging Technology – in a report published October 2025. DayOne, the international arm of GDS Holdings, committed USD 3.5 billion to Johor in 2025.

DSET identifies four models through which Chinese capital has entered Malaysia’s stack: direct operator subsidiaries, joint ventures with local partners, third-party providers hosting Chinese clients and Chinese firms investing in the energy infrastructure that powers the facilities. ‘

Each model carries a different risk profile for institutional counterparties, and a different regulatory exposure under US policy.

The Chip Loophole Washington Is Closing

Faye Simanjuntak of the Asia Society Policy Institute noted in January 2026 that Malaysia’s neutrality has made it an attractive location for Chinese firms seeking advanced chips unavailable on the mainland under US export restrictions. By establishing facilities in Malaysia, operators can legally procure semiconductors barred from direct export to China.

Washington is moving to close that gap. The US Bureau of Industry and Security’s Affiliates Rule is suspended until November 2026. On reinstatement, it requires operators to disclose beneficial ownership structures and restricts AI chip access for facilities connected to listed Chinese entities.

When the rule reinstates, operators and investors with opaque ownership structures or Chinese counterparty exposure face material compliance risk. Farlina Said, a senior analyst at the Institute of Strategic and International Studies Malaysia, has warned stricter US rules could restrict Malaysia from providing compute to Chinese AI models, “potentially affecting profitability.”

The CSIS has documented the enforcement dimension. In 2024, Singapore charged a ring that purchased USD 390 million in servers with banned NVIDIA GPUs and routed them into Malaysia – a case CSIS assessed as likely representative of wider diversion traffic.

The Infrastructure Dependence That Complicates the Picture

The geopolitical exposure runs in both directions. China is not only occupying Malaysia’s data centre capacity; it is building the energy infrastructure those facilities depend on.

PowerChina operates gas power and hydropower projects across the country. Huawei runs smart grid upgrades. Tianneng Group launched a 1 GWh solar-storage-computing project in early 2026, framed as a clean power solution for regional data centre operators.

This creates an asymmetry that no Western-aligned policy response has yet addressed. Restricting Chinese operators from Malaysian data centres is a tractable regulatory problem. Replacing that capital in Malaysia’s power grid is not, at least not on any timeline investor models currently assume.

What Institutional Investors Need to Map Now

Three specific risk vectors have defined timelines.

The Affiliates Rule reinstates in November 2026. Operators and investors with Chinese beneficial ownership exposure, or contracts granting Chinese entities chip access, need compliance assessments before that date, not after.

Malaysia is taking a more selective approach to data centre approvals, per Natural Resources Minister Nik Nazmi Nik Ahmad’s January 2026 Financial Times interview.

Projects with significant Chinese counterparty structures are more likely to face scrutiny under a framework that is tightening on both environmental and security grounds simultaneously.

RHB Investment Bank’s April 2026 research identified Malaysia as a data centre safe haven, citing Middle East security concerns prompting portfolio rebalancing toward Southeast Asia.

That thesis is directionally correct. It does not account for the November 2026 compliance deadline or the infrastructure dependency that sits underneath the safe-haven narrative.

Malaysia has not chosen a side. Both sides are now acting as if it must.

The post The Geopolitical Wiring Beneath Malaysia’s Data Centre Boom appeared first on Bizruption Asia.

Malaysia’s Regulatory Period 4 (RP4), effective 1 July 2025, replaced flat-rate billing with a five-component structure: energy charge, capacity charge, network charge, retail service charge and a monthly Automatic Fuel Adjustment (AFA) mechanism. Data centres at scale were placed into a new ultra-high voltage (UHV) category at average tariffs of approximately 60 cents per kilowatt-hour.

Sprint DC Consulting founder Gary Goh estimated the impact at US$ 15-20 million per year for a large facility before the fuel surcharge. Data Centre Association of Malaysia president Mahadhir Aziz noted that operators who had committed land and capital could still reconsider their positions if the calculus shifted materially.

But reconsideration quickly gave way to recalibration. Deals moving towards financial close in 2026 are being underwritten with RP4 as the base case, and three structural responses have emerged.

The first is a redesign of power cost pass-through clauses. Where earlier leases included fixed or capped electricity recovery, sponsors and lenders are now seeking structures in which documented tariff changes – including monthly AFA movements – flow directly to the operator’s revenue line. The creditworthiness of hyperscaler tenants, which is central to non-recourse underwriting logic, supports this: investment-grade counterparties can absorb verified tariff changes provided the mechanism is clearly defined in the lease.

The second concerns debt service coverage ratios. The shift from a semi-annual ICPT to a monthly AFA is the key change here. Where the old mechanism gave sponsors a six-month planning cycle, the AFA resets every month based on fuel prices and the ringgit-to-dollar exchange rate, with the Energy Commission capping automatic adjustments at ±3 cents per kWh before Cabinet review is triggered.

For a facility drawing hundreds of megawatts, even that monthly band translates into material cash flow variability – a sensitivity that static DSCR models do not capture. Lenders are now stress-testing coverage against a range of AFA scenarios rather than a single tariff assumption and incorporating stepped cash sweep mechanisms that activate at defined coverage levels rather than triggering immediate covenant breach.

The third response is the Corporate Renewable Energy Supply Scheme (CRESS), which Malaysia opened to all commercial consumers from 1 March 2025. CRESS allows operators to procure renewable power directly from independent developers via long-term PPAs of up to 21 years, bypassing the retail tariff entirely.

KWM notes that CRESS contracts can be structured to provide long-run price certainty against future tariff increases, a direct hedge against AFA variability. The scheme received its first validation in June 2025 when DayOne Data Centres signed Malaysia’s first Bilateral Energy Supply Contract under CRESS with TNB.

White & Case noted that post-RP4 tariffs still average around USD 0.10/kWh, and that Malaysia retains a cost advantage over regional peers. The shock has been absorbed. What remains is the discipline of building that reality into every deal from day one.

The post How Malaysia’s Tariff Reset Is Reshaping Covenant Strategy appeared first on Bizruption Asia.

The post Malaysia Data Centres: The Next Underwriting Challenge appeared first on Bizruption Asia.