You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

September 3, 2019

Cryptocurrency Regulations in Mainland Southeast Asia

Informed Counsel

Introduction

The rapid global proliferation of cryptocurrencies—digital currencies using advanced cryptography (typically blockchain) to verify and secure transactions and maintain supply—has seen governments scrambling to regulate what some see as an opportunity and others see as a threat. The digital nature of cryptocurrencies has meant that investors faced with new regulations can quickly seek new jurisdictions to act as a safe harbor for their assets, while developing countries that have a varied history with fiat currency have responded to this high-risk capital inflow in a number of different ways.

In this article, we compare the cryptocurrency regulations (or lack thereof) in mainland Southeast Asia—an area of increasing interest to investors following restrictive policies in China, India, and elsewhere.

Country Overviews

Cambodia – Jay Cohen, Partner and Director, Cambodia

While there is no clear regulatory scheme in Cambodia for cryptocurrencies and cryptocurrency-related activities, a joint statement on cryptocurrencies was released on May 11, 2018, by the National Bank of Cambodia (NBC), the Securities and Exchange Commission of Cambodia (SECC), and the General-Commissariat of the National Police. The release of this statement likely indicates that these ministries would be involved in the regulation of cryptocurrencies in the future, should Cambodia choose to regulate them.  

The statement makes it clear that unlicensed operations related to cryptocurrencies (e.g., propagation, buying, selling, trading, and settlement) are illegal. To date, however, neither the NBC nor the SECC have given guidance on how to apply for such a license. This could indicate that a licensing scheme for cryptocurrencies is being considered, but overall the NBC and SECC have shown reluctance to adopt cryptocurrencies in recent public statements.   

The statement also indicates that those who participate in cryptocurrency-related activities without obtaining a license from competent authorities would be subject to penalties in accordance with applicable laws. However, it is unclear what laws apply in this case, so the scope of punishments could range greatly in severity.

Laos – Dino Santaniello, Head, Laos

There is also no regulatory framework yet in place in Laos, but the Bank of the Lao P.D.R. (BOL) has issued two notifications and a warning regarding cryptocurrency.   

The first, Notification No. 314/BOL, dated August 29, 2018, encourages the Lao population to be more knowledgeable about cryptocurrency. To combat questionable or potentially misleading advertisements on social media and elsewhere promoting the use of cryptocurrencies, the BOL warned that cryptocurrency is not money and cannot be used to pay debts, while expressly identifying that there are no attendant regulations in Laos. The notification also explains the risks, lack of transparency, and potential negative ramifications of using cryptocurrencies for payment.

The BOL again addressed cryptocurrencies in Notification No. 382/BOL, dated October 30, 2018, which prohibits financial institutions in Laos from engaging in cryptocurrency-related activities or helping their clients to participate in various activities. However, no penalties for violating these prohibitions were clearly indicated. The positions of both notifications were subsequently reiterated in a BOL warning.

Some have interpreted this response as the BOL waiting to learn more about cryptocurrency before deciding upon its approach—merely urging caution rather than taking steps toward providing a clear legal framework. However, although cryptocurrency has not been declared illegal per se, the BOL’s position lays the groundwork for a potentially negative response.

Myanmar – Ross Taylor, Counsel   

In Myanmar, the only official statement on cryptocurrencies has been an announcement issued by the Central Bank of Myanmar (CBM) on May 3, 2019, which affirms that the CBM is the sole legal issuer and manager of domestic currency; that the CBM does not recognize any cryptocurrency as legal tender in Myanmar; and that the CBM has not given approval to any financial institutions to buy, sell, or exchange cryptocurrencies. Any financial institutions (bank and non-bank) that do not abide by the announcement’s provisions may face a variety of administrative sanctions up to and including the revocation of licenses under the Financial Institutions Law (2016), and consumers who buy, sell, or exchange cryptocurrencies do so at their own risk.   

Some other regulations are also pertinent here. For example, if buying and selling cryptocurrencies were used to avoid the foreign exchange regime, the party doing so could arguably be prosecuted for conducting a foreign exchange business without a license under the Foreign Exchange Management Law (2012). Similarly, if any such activity was deemed to involve money laundering, the act could be punishable by up to 10 years’ imprisonment. As for tax obligations, any profits made from cryptocurrency trading would be taxable in Myanmar as income upon examination by a tax officer.

Thailand – Praew Annez, Consultant       

Thailand leads the way as the only country in mainland Southeast Asia to have a regulatory regime for cryptocurrency. The Securities and Exchange Commission (SEC) supervises cryptocurrency-related activities, which are regulated by the 2018 Emergency Decree on Digital Asset Businesses (the “ICO Decree”). This regulates the offering and dealing of “digital assets,” including cryptocurrencies and digital tokens.    

The ICO Decree also sets requirements for ICO portals and digital asset businesses. An ICO portal is defined as an electronic system provider with the offering of newly issued digital tokens, while digital asset businesses include digital asset exchanges, digital asset brokers, and digital asset dealers. Under the ICO Decree, issuers of digital tokens must register with the SEC and obtain the appropriate approvals. This process includes the submission of a draft prospectus to the SEC.    

Additional requirements are set for issuers offering digital tokens to the public. When applying for approval, issuers must submit a registration statement and a draft prospectus, and must issue tokens according to the categories specified under the SEC approval.   

The ICO Decree sets a comprehensive structure of offenses subject to criminal sanctions and civil sanctions, which could include civil penalties, financial damages, prohibitions of involvement in cryptocurrency-related activities, and reimbursement of expenses incurred in investigating the offense.

Capital gains from the sale of digital assets are subject to income tax. For VAT purposes, digital assets are regarded as “goods,” which are subject to 7% VAT.

Vietnam  – Thao Thu Bui, Trainee Lawyer

In Vietnam, cryptocurrencies are commonly referred to as “virtual assets.” There are no legal definitions, and a regulatory framework is still lacking. However, cryptocurrencies are strictly prohibited from use as payment instruments in Vietnam.

On August 21, 2017, the prime minister issued Decision 1255 directing the Ministry of Justice, the State Bank, the Ministry of Finance, and the Ministry of Public Security to prepare reports explaining the legal status of “virtual assets” and “virtual currencies” and to recommend the amendment or issuance of relevant legislation. Almost two years later, the reports have either not yet been completed or have not been announced publicly. This delay may indicate that the government has not been able to adopt a clear stand on how to regulate cryptocurrencies in Vietnam.

In the meantime, the prime minister issued Directive 101 on April 11, 2018, after a series of cryptocurrency-related fraudulent activities. This directive ordered:

  1. the State Bank to direct credit institutions and intermediate payment providers not to carry out transactions associated with “virtual currencies”;
  2. the Ministry of Finance to direct securities firms not to engage in issuance, brokerage, and trading of “virtual currencies”; and
  3. the Ministry of Public Security to intensify its investigations into acts of mobilizing funds, multi-level marketing, and fraud in relation to “virtual currencies.”

Following this directive, the State Bank and the State Securities Commission issued warnings to lower-level banks, securities firms, and public companies not to engage in cryptocurrency-related transactions.   

Issuance, provision, or use of illegal payment instruments is subject to an administrative fine of up to VND 400 million (approx. USD 17,094) or imprisonment for 6 to 36 months.

Summary   

Although cryptocurrency regulations remain scant across mainland Southeast Asia, a quick comparison of the provisions that are in place shows that the region is not a uniformly welcoming environment for them either. Indeed, the only jurisdiction with a clear regulatory framework—Thailand—is the most expressly hospitable, with other countries issuing tentative warnings and cautionary prohibitions, rather than full regulatory frameworks.

RELATED INSIGHTS​ 

January 4, 2024
On December 25, 2023, Thailand’s Personal Data Protection Committee (PDPC) issued two notifications under sections 28 and 29 of the Personal Data Protection Act 2019 (PDPA) that address essential aspects and criteria for the cross-border transfer of personal data. These notifications are scheduled to come into effect on March 24, 2024. Key points in the notifications are outlined below. Adequate Data Protection Standards (Section 28) Unless otherwise provided by the PDPA, the destination country or international organization that receives the transferred personal data must have “adequate data protection standards,” as determined by the following factors: Legal measures and mechanisms. The destination country or international organization must have legal measures or mechanisms aligned with the personal data protection laws in Thailand. Specifically, the obligations of data controllers need to include providing appropriate security measures, implementing personal data protection measures that are suitable and that enable the exercise of data subjects’ rights, and establishing effective legal remedial measures. Regulatory authority. The presence of an agency or organization entrusted with the duties and authority to enforce laws and regulations related to personal data protection is also a critical factor. In addition, this notification empowers the Office of the PDPC to refer cases, either independently identified or proposed by a data controller, to the PDPC for adjudication. The PDPC retains the discretion to make decisions on a case-by-case basis or to establish a list of destination countries or international organizations that it considers to have adequate data protection standards. Binding Corporate Rules and Appropriate Safeguards (Section 29): In the realm of global data exchange, two prominent mechanisms have emerged as key enablers of secure and compliant transfer of personal data: Binding corporate rules (BCRs). Implementation of BCRs involves enforcing an approved policy for safeguarding personal data transferred among affiliated businesses or within the
January 2, 2024
Myanmar’s Ministry of Commerce (MOC) has released updated information regarding the registration fees for online retail businesses. The fees and criteria, which are included in the MOC’s Export/Import Newsletter No. 17/2023 dated December 28, 2023, are laid out below. Registration Fees The official registration fees vary depending on the applicant type: Companies or other commercial organizations: MMK 70,000 (approx. USD 33.5) for registration and renewal; MMK 3,000 (approx. USD 1.5) for each amendment. Small and medium enterprises (SMEs): MMK 50,000 (approx. USD 24) for registration and renewal; MMK 3,000 (approx. USD 1.5) for each amendment. Individual applicants: 30,000 MMK (approx. USD 14.5) for registration and renewal; MMK 3,000 (approx. USD 1.5) for each amendment. Validity Period Registrations approved from January 1, 2024, will be valid for two years from the date of grant. The requirement for online retail businesses to register their operations was announced in July 2023. Based on statements from the MOC, online retail businesses need to complete their registration by late January 2024 to avoid potential enforcement actions. Regarding SMEs, the MOC will also evaluate their SME registration certificate issued by the Agency Office under the Small and Medium Enterprises Development Law 2015. For assistance completing the registration process, or for more details on any aspect of online retail operations in Myanmar, contact Tilleke & Gibbins at [email protected].
December 15, 2023
As part of its membership in Lex Mundi, Tilleke & Gibbins has published an updated edition of its Guide to Doing Business in Thailand for 2023. This guide outlines the key factors for starting and operating a business in the Thai market. Issues covered include: Investment incentives Financial facilities Exchange controls Import and export regulations Structures for doing business Requirements for the Establishment of a Business Operation of the Business Cessation or Termination of the Business Labor legislation, relations, and supply Tax Immigration requirements This publication is part of Lex Mundi’s Country Guides series prepared by member firms in more than 100 jurisdictions worldwide. The guides serve as a useful resource for planning international business strategy and researching new markets. The full Guide to Doing Business in Thailand is available through the button below.
December 15, 2023
Vietnam’s new Law on Electronic Transactions No. 20/2023/QH15 (LOET 2023) was promulgated by the National Assembly on June 22, 2023, and will replace the existing Law on Electronic Transactions No. 51/2005/QH11 (LOET 2005) when it enters into effect on July 1, 2024. The LOET 2023 is aimed at facilitating transactions carried out in an electronic environment in all sectors. Derived from the fundamental principles of the LOET 2005, the LOET 2023 is similarly considered a framework law, developed based on the Model Law on E-Commerce of the United Nations Commission on International Trade Law (UNCITRAL). The main points of interest of the LOET 2023 are summarized below. 1. Scope of Application Unlike the LOET 2005, which explicitly excludes certain areas such as the issuance of certificates of land use rights and birth certificates from the scope of application, the LOET 2023 covers all areas without exception. However, the LOET 2023 will still not interfere with the regulations of substantive laws that stipulate the content, conditions, and forms of transactions in their respective areas (Article 1.2). The LOET 2023 also provides that it will only be applicable if other laws either allow or remain silent on the electronic execution of transactions; otherwise, if another law specifically does not permit a transaction to be carried out electronically, such law shall apply (Article 1.3). This emphasizes that the applicability of the LOET 2023 depends on the electronic readiness of specific sectors. 2. Enabling E-Transactions in All Sectors For traditional transactions or contracts to be legally valid, they typically require written documentation, the signatures of the involved parties, and the seals of organizations or companies, if required by substantive laws or common practice. Additionally, certain sectors mandate further steps like notarization or certification, such as in property transactions like house sales or inheritance