"Park At Your Own Risk" — I Used To Think That Sign Meant I Had No Rights. Turns Out It Doesn't.

Every time I take a ticket at a mall barrier and drive past that faded sign, some part of my brain quietly files my car under "not my problem anymore, also not their problem." Which is a strange thing to believe, if you think about it. I'm paying money. There's a gate. There's a guy in a booth. There are 40 cameras. And yet the sign says: if anything happens, good luck ah.

For years I assumed the sign settled it. It doesn't. Here's what actually happened when someone tested it in court.

What happened at The Pinnacle, Bandar Sunway

In April 2016, a car rental company, Euro Rent A Car, hired out a vehicle to a French visitor named Hemici Sofiane. He parked it at The Pinnacle Sunway in Bandar Sunway at about 2.30pm and came back at around 7pm to find it gone. CCTV showed the thief had "tailgated" a car that was exiting after paying — the barrier came down too slowly to stop him leaving without a ticket.

Euro Rent sued the car park operator, Sunway Parking Services, for negligence. The operator leaned on its exemption clause — that vehicles were parked solely at the customer's own risk. The Sessions Court judge, Izralizam Sanusi, didn't buy it: the driver had paid the parking fee before parking, a bailor–bailee relationship existed because Sunway Parking had possession of the vehicle, and the operator was responsible for the security of the car.

That decision (reported as [2017] MLJU 2279, Shah Alam Sessions Court) went up on appeal, and stayed up. The Court of Appeal upheld the lower court, ordering damages of about RM117,000, and agreed that Sunway Parking could not rely on the exemption clause to escape liability. There was also 5% interest until the judgment sum was paid, plus RM7,325 in costs.

One honest caveat before anyone frames this on the wall: the Court of Appeal gave only an oral decision, and Euro Rent's counsel wrote in asking for written grounds precisely because the ruling set a precedent. We couldn't find published written grounds from the Court of Appeal at the time of writing. The detailed reasoning that everyone quotes — including the bits below — comes from the Sessions Court judgment.

Why the sign didn't save them

The clause only covered what it said it covered

Exclusion clauses get read narrowly, and any ambiguity is read against the party that wrote it (lawyers call this contra proferentem). The clause in that case was worded around loss and damage to a vehicle. Theft of the whole car? Not spelt out. If you draft it lazily, you don't get to stretch it later.

There's also the timing problem, which is my favourite bit. In the classic English case Olley v Marlborough Court, a notice disclaiming liability was stuck inside a hotel room — and the court held it wasn't part of the contract, because the contract was already made before the guests ever saw it. Now think about where most car park notices live: on a pillar after the barrier, or in six-point print on a ticket you only receive once you're already committed.

Once your car is in there, the burden flips

This is the part most people don't know. Under the Contracts Act 1950, a bailment is when you hand over goods to someone for a purpose, on the understanding they'll be returned. Section 104 says the bailee must take as much care of the goods as a person of ordinary prudence would take of their own goods of the same value.

And here's the sting. In Port Swettenham Authority v T W Wu & Co, the Privy Council held that sections 104 and 105 put the onus on the bailee to prove it took the required care. So in a gated, paid car park, the operator is the one who has to walk into court and prove it wasn't careless. Not you. That is a genuinely big deal for an ordinary person who has no idea what happened between 2.30pm and 7pm.

The Consumer Protection Act 1999 sits on top of all this

Three provisions matter:

• Section 6 — no contracting out. The Act applies regardless of what any agreement says, and a supplier who purports to contract out of it commits an offence.
• Part IIIA (sections 24A–24J) — unfair contract terms, added by the 2010 amendment. Section 24C deals with procedurally unfair terms and section 24D with substantively unfair ones — including a term that excludes or restricts liability for breach without adequate justification. Where a court or the Tribunal finds a term procedurally or substantively unfair, it may declare that term unenforceable or void.
• Section 53 — implied guarantee of reasonable care and skill. Where services are supplied to a consumer, there is an implied guarantee that they'll be carried out with reasonable care and skill. Selling you a parking space is a service.

KPDN has taken this view publicly for a long time. Way back in 2011, the ministry's state director in Sarawak told premises management and paid car park operators to remove "park at your own risk" notices, saying they were no longer applicable. Fifteen years on, the signs are still everywhere. Enforcement and reality don't always shake hands.

The part nobody tells you: when you'd probably still lose

I'd be doing you a disservice if I stopped at the happy ending. The Euro Rent case is powerful, but it is not a blank cheque.

No possession, no bailment. The whole argument rests on the operator having custody and control of your car — barrier, ticket, payment, enclosed premises. Park on a MBSA open lot where you pay a coupon or an app and drive off freely, and it's much harder to say anyone took possession of anything. Across the Commonwealth, courts have held that a mere licence to put goods on land — as with most car parks — doesn't make the operator a bailee, and without bailment there's generally no duty on an occupier to guard a visitor's property against theft by a third party. Malaysian courts have leaned the other way for gated, paid car parks specifically. Between those two poles is a lot of untested grey.

Part IIIA is about contract terms, not signboards. Academics have pointed out that the Part doesn't cover unfair notices. So a painted wall disclaimer may need to be attacked on incorporation and interpretation grounds, rather than straightforwardly declared void.

"Consumer" has a legal meaning. If the car is registered to your company or was parked for business, you may fall outside the CPA — which is likely part of why Euro Rent sued in negligence in the ordinary courts rather than going to the Tribunal.

You still need something to point at. A slow barrier, an exit with no guard, cameras that were pointed at nothing or recording nothing, a complaint you'd made two weeks earlier that went nowhere. If the system worked properly and a syndicate cloned your key fob in 90 seconds, the operator has a strong answer.

Things inside the car are a different fight. Nobody took delivery of your laptop bag. In June 2025, a Singaporean visitor's car was broken into at Paradigm Mall in Johor Bahru while she was shopping, with luggage and a backpack taken — she'd parked near the lift lobby. Sympathetic, common, and legally much harder than a stolen car.

Flooded basements are their own animal. In July 2026, FOMCA's chief operating officer Nur Asyikin Aminuddin said owners of vehicles damaged by flash floods can consider claiming against the local authority — but not automatically just because there was a flood; you'd need evidence of negligence such as failure to maintain drainage or blocked drains. Same logic applies to a mall basement. And remember standard motor insurance doesn't cover flood damage — that's the Special Perils add-on.

What this means for you at the mamak-carpark level

Scale first. Insurance industry figures via VTAREC show 3,925 vehicles stolen in 2024 — 1,771 private cars, 1,833 motorbikes and 321 commercial vehicles — down slightly from the year before. Police numbers run far higher: 14,592 vehicles in 2023 and 10,849 up to September 2024, which tells you how many uninsured vehicles are out there. The Toyota Hilux topped the stolen list for 2024 with 370 reported cases.

So this isn't an exotic scenario. Three practical things follow:

Valet is your strongest position. You physically hand over the key. That's about as clean a bailment as it gets. In July 2024, Suria KLCC confirmed a car was stolen from its valet service — the vehicle had been parked by the attendant and the key was still at the valet counter when it disappeared. Police recovered the SUV at USJ 1 Avenue in Subang Jaya the same day and arrested the suspect, with the case investigated under section 379A of the Penal Code.

Insurance is still your first call, not your last resort. Comprehensive cover handles theft; suing the operator takes months. Where the lawsuit earns its keep is the gap: your excess, your lost NCD, accessories that weren't covered, replacement transport, or an insurer that rejects the claim. And if your insurer pays out, it may go after the operator itself by way of subrogation.

Say it out loud at the counter. The single biggest reason these claims die is that the CCTV got overwritten while everyone was being polite.

Your first 24 hours, in order

• Don't drive off. Report it at the management office immediately and make sure it's logged in writing. Get the staff member's name and the time.
• Ask them in writing to preserve the CCTV — WhatsApp or email, so there's a timestamp on your request. Footage often loops over within weeks.
• Photograph everything: the exact wording of the signboard, your ticket, the barrier, the empty bay, broken glass, the lighting, any camera that looks decorative.
• Make a police report the same day. Motor vehicle theft falls under section 379A of the Penal Code, and you'll need the report for insurance anyway.
• Notify your insurer within 24 hours. If it's flood, ask specifically whether you have Special Perils.
• Keep the parking ticket, receipt, Touch 'n Go record or app transaction. That's your proof you paid for a service — the hinge of the whole argument.
• Send a letter of demand to the operator, named properly. The car park company and the mall are often two different entities.
• Then pick your forum. TTPM handles consumer claims up to RM50,000, filed within three years, via Form 1 on the e-Tribunal portal at ttpm.kpdn.gov.my, and its awards are binding — a trader who ignores one commits an offence. Below RM5,000, the small claims procedure at the Magistrates' Court under Order 93 of the Rules of Court 2012 lets you file yourself without a lawyer. Above RM50,000, you're looking at a normal civil suit. General complaints go to KPDN at 1-800-886-800 or e-aduan.kpdn.gov.my.

The verdict

The sign isn't a lie, exactly. It's a hope. It's the operator hoping you'll read it, sigh, and go home.

What Euro Rent established is that when you pay, drive through a barrier, and leave your car inside someone's controlled premises, the law treats that as more than renting a rectangle of concrete. They're holding your property. If it vanishes on their watch, they're the ones who have to explain what they did to stop it.

That doesn't make every claim a winner. It does mean the conversation at the management counter should start very differently from how most of ours have started.