Warta
4notify Malaysia · Federal Gazette
OFFICIAL · MyGov · MyDigital ID · MySejahtera
Warta No
WTA-MY-004
Date
2026-05-27
Status
In force
Section
Digital government

MyGov, MyDigital ID and MySejahtera: one-time-code delivery for the Malaysian citizen

MyGov is the citizen front door to federal services; MyDigital ID is the national digital identity built on top of the MyKad national identity card; MySejahtera carries health-system messaging. 4notify integrates with the digital-government notification fabric and delivers appointment reminders, trámite-ready notices and one-time codes — with MyKad number SHA-256 masking and a three-channel cascade tuned to the citizen's stored preference.

PushSMSE-mail
Preamble

Whereas, in exercise of the powers conferred by the Personal Data Protection Act 2010 and the Digital Signature Act 1997 and the policy direction of MyDigital, this Warta is issued concerning the delivery of MyGov, MyDigital ID and MySejahtera notices to the Malaysian citizen.

Statutory basis
Digital Signature Act 1997 (Act 562)

Statutory basis for the recognition of digital signatures and the licensing of certification authorities.

Personal Data Protection Act 2010 (Act 709)

Mandates lawful basis, masking and breach-notification standards for personal data including the MyKad identifier.

MyDigital blueprint + MAMPU guidelines

Whole-of-government interoperability and notification policy for federal digital services.

Implementation
01

Integration with MyGov / MyDigital ID

4notify integrates with the federal notification gateway; quarterly penetration testing applies and incident channels are pre-agreed with MAMPU and JPN.

02

MyKad masking

The delivery envelope carries the MyKad number only as a SHA-256 + salt hash; the cleartext stays inside the issuing agency, which resolves the hash locally.

03

Three-channel cascade

Trámite ready → push (60s) → SMS (2 min) → email (5 min); citizen preference is read from the MyDigital ID profile.

04

OTP delivery for MyDigital ID

MyGov and MyDigital ID one-time codes are delivered inside a 60-second window; if SMS DLR fails, e-mail provides the durable medium for evidentiary purposes.

Delivery envelope
json
{
  "event": "gov.trámite.ready",
  "mykad_hash": "sha256:salt:7f2a9b...",
  "agency": "JabatanPendaftaranNegara",
  "agency_name": "JPN · Putrajaya",
  "channels": ["push", "sms", "email"],
  "cascade_window_min": 5
}
Sample message
PushSubject: Your JPN appointment is confirmed

MyGov: your JPN MyKad renewal at Putrajaya is confirmed for Fri 14:00. Bring your old MyKad. Reschedule in the MyGov app up to 24h before.

Compliance checklist
  • MyGov / MyDigital ID gateway integration active
  • MyKad SHA-256 + salt masking enforced at envelope level
  • Citizen-preference cascade implemented (push → SMS → email)
  • OTP P50 ≤ 4 seconds measured across all four carriers
The 4notify difference

4notify is the only A2P provider with native integration into the MyGov / MyDigital ID notification gateway, MyKad SHA-256 envelope masking, and a federal-grade template library aligned with the Digital Signature Act 1997 and the PDPA 2010.

Frequently asked
Can 4notify see the citizen's MyKad number?

No. The envelope carries only the hash; the issuing agency retains the cleartext MyKad number and resolves the hash locally before display.

Does this cover JPN, JPJ and other agency appointments?

Yes — any agency wired through the MyGov / MyDigital ID notification gateway rides on the same envelope; the channel is whatever the citizen has chosen in their profile.

Published
4notify Operations Department
2026-05-27 · WTA-MY-004

Start free

14 days, no card required. English support across ASEAN business hours.

Other entries in this edition