Consumer protection and complaints for travel bookings

Start with the party you paid, in writing. If that does not solve it, there are routes for different problems.

The Ministry of Tourism, Arts and Culture (MOTAC) handles licensing, and the Tribunal for Consumer Claims hears money claims. This page is a map, not legal advice, and the details of each process should be confirmed with the authority.

It follows payment methods and safety and sits within our island booking checklist.

What is the order of steps?

Follow this order, and keep every message:

1. Gather your quote, receipt, messages and photos.
2. Write to the party you paid, say what happened and what you want.
3. Set a reasonable reply date, such as a few working days.
4. If there is no reply, write once more and copy the resort or operator.
5. Then choose the route that fits, from the table below.

A calm, factual message gets better results than an angry one. Name the date, the amount and the term you rely on.

Which problem goes where?

Problem	Where to look
The seller may be unlicensed	MOTAC complaints system
You paid and want a refund	Tribunal for Consumer Claims, if within its rules
A room, boat or service was not as agreed	The seller first, then the options above
Your personal data was misused	The data protection regulator, the Personal Data Protection Department (JPDP)

The sources we checked do not give a full list of every route, so treat this as a starting map. Confirm with the authority which one fits your case.

What do the sources confirm?

The Tribunal for Consumer Claims hears claims not exceeding RM50,000, though parties may agree in writing to larger claims ^[1]. A claim must arise within three years, it excludes personal injury and death and some sectors, and an award binds like a Magistrate’s order ^[1]. Check the site of the domestic trade ministry (KPDN) for the process and any changes.

For licensing, MOTAC accepts reports of suspected unlicensed activity through its SISPAA (Sistem Pengurusan Aduan Awam) complaints system ^[2]. MOTAC also publishes a list of entities that have committed offences under the Tourism Industry Act 1992 ^[3].

For personal data, the PDPA 2010 came into force in 2013 and the regulator is JPDP, with 2024 amendments adding breach notification in stages from 2025 ^[4]. Details on consent were not verified, so check the regulator.

What evidence should you gather?

Keep these in one folder:

• The written quote with the validity date.
• Proof of payment: slip, statement line and receipt.
• Messages with the seller, in order, as screenshots.
• Photos or notes showing the problem, with dates.
• The licence check result, if licensing is the issue.

Our guide on screenshots, PDFs and chat quotes shows how to save chats, and documenting a cancellation shows what insurers look for.

A better fit if…

This guide suits you if:

• you have a live problem and need the order of steps.
• you want to prepare before booking, in case something goes wrong.
• you are helping a family member with a booking dispute.

If you are in an emergency at sea or on the island, contact the resort, the boat operator or emergency services first, and handle the complaint later.

What should you do next?

Write down what happened, with dates and amounts, in five lines. Gather the evidence, send your first message to the party you paid and keep the reply. For who to approach first, read who is responsible.