Gemini say

Two-party consent for phone calls: Malaysia follows a two-party consent rule for telephone calls, meaning all participants in a conversation must give permission before it can be recorded. If you are recording a conversation you are part of, you should explicitly state your intent to record at the beginning of the call.
Personal Data Protection Act (PDPA) 2010: This law requires organizations to obtain consent before collecting and processing personal data for commercial transactions. An unauthorized recording could violate the PDPA if the recorded conversation contains personal data.
Penal Code: Section 509 of the Penal Code makes it a criminal offense to intrude upon a person's privacy in a way that insults their modesty. The scope of this is limited, but a surreptitious recording could be prosecuted under this section depending on the content and context.