Bank Rakyat Sandbox is a platform that enables collaboration with external parties in shaping the future of digital Islamic finance. The platform promotes ethical financial services, encourages innovation, and upholds Shariah principles.

Anyone can view the overview of our Bank Rakyat Sandbox platform.

However, to view our API products and API Documentation, you will need to Sign Up and register for an account with Bank Rakyat Sandbox using your valid Company Email. Please take note that registerations are not allowed with individual or personal email IDs.

To get your own Bank Rakyat Sandbox account, simply visit our platform, select Sign-Up, and enter the following information:

Section 1 – Your Details
1. Full Name
2. Display Name
3. Company Email
(Please ensure that you use a valid individual company email and domain. E.g.: John@CompanyA.com)
4. Password
5. Confirm Password

Section 2 – Company Details
1. Company Name
2. Business Nature

Section 3 – Due Diligence Questions
1. Does your company previously or currently have a working relationship with Bank Rakyat?
2. What is your area of interest for a potential project? Please provide a brief description.
3. What are your company’s products and/or services?
4. Does your company have an information security policy and procedures in place?
5. Does your company have a data protection and privacy policy in place?
6. Tick declaration

Section 4 – Terms & Conditions
Tick agrees to the Terms and Conditions and Privacy Policy and then click “Create My Sandbox Account”.

A confirmation email will be sent to your registered email for verification, we will proceed with our internal approval process.

Please be advised that it may take up to 1 to 3 business working days for your account to be approved.

Please check the spam or junk mail folder in your mailbox.

If the issue persists, please send us a message via the Contact Us for or Ask Me feature.

Go to the sign-in page, click Reset Password, fill in your email, and click Send Reset Password Link.

You will receive an email with a link to reset your password.

1. Password must be at least eight characters.
2. Password must contain at least one capital letter.
3. Password must contain at least one lower letter.
4. Password must contain at least one number.
5. Password must contain at least one special character.

Generally, we do not allow users to change their email address.

However, should you insist on changing your email address, kindly submit your request via Contact Us form or Ask Me feature and tell us why you need to change it. Please include your current email address and we will email you with the next steps.

Rest assured that we are proactively reviewing your account creation request.

We may take up to 1 to 3 business working days to process and approve your Bank Rakyat Sandbox account

Reach out to our dedicated Sandbox Admin via the Contact Us form or Ask Me feature. We will review your request and assist in resetting your TFA setup.

Once you are ready to set up the TFA, you can follow the TFA registration steps.

You can use your existing phone and TFA to access your Sandbox account. Under your account settings, you will find an option to reset your TFA.

After resetting it, follow the TFA registration steps to set it up again on your new phone.

You can skip setting up TFA twice. On your third login, you will no longer be able to access your Sandbox account or use Bank Rakyat Sandbox API services. 

To regain access, submit your request to Sandbox Admin via the Contact Us form or Ask Me feature.

To start the TFA registration, you can either click “Set Up Application,” on the landing page or select “TFA setup” under
the My Account page.

Enter your password and click “Confirm” to begin the setup.

You will see a list of authentication apps from which to choose from. You can either enter the unique code into your TFA apps or scan the QR code for it.

Once your authenticator setup is done, enter the code from your TFA apps and then click “Verify and Save”.

You will see your TFA setup change to “TFA enabled” and the date the setup was done.

You are now ready to log in with TFA enabled.

The platform is optimised to support the following web browsers:

1. Google Chrome version 57 or higher
2. Firefox version 52 or higher
3. Edge version 12 or higher
4. Safari version 10 or higher

However, we encourage users to always update their web browsers for optimal usability.

For more information regarding the Sandbox platform, please get in touch with us via Contact Us form or Ask Me feature. We are happy to answer your questions.

You must be a registered user to view the API technical documentation.

Please proceed with the sign-up process and our operations team will then process your account creation request.

As part of our security control, we have implemented a policy where each user account will be set to 'inactive' after 6 months.

However, it is effortless to reactivate your developer account by resetting your password and log in to Bank Rakyat Sandbox.

Please be aware that the re-activation must be within 90 days grace period of your account being deactivated. If your account stays inactive for more than 90 days in the grace period, it might result in the deletion of your developer account.

Signing up for the Bank Rakyat Sandbox and testing it is free of charge.

To partner up with Bank Rakyat, please contact our business operations team at APISandbox.support@bankrakyat.com.my for more information on the API subscription process.

You can select MyApps and request a New App by clicking the New App button.

Fill up the required field, choose Sandbox, and click Request.

To work on a project as a team, you may create a project and add or invite your team members to the project.

You can select MyApps and request a New App by clicking the New App button.

Fill up the required field, choose which API you want to access and click Request.

Rest assured that we are proactively reviewing your application.

We may take up to 1 to 3 business working days to review and respond to your application.

Please note that we will be reviewing your organisation as well as the product or use case proposed.

No, all the data in our Sandbox is strictly test data and does not contain any real Bank Rakyat customer information.

The Sandbox is designed to offer only a representative sample response simulating the actual production response.

OAuth 2.0 is an open protocol for secure authorisation. Users will need to get access token to use Bank Rakyat Sandbox APIs.

The API secret key is used to identify and authenticate your account. Users will be provided with an API secret key upon application approval.