Regus - Kuala Lumpur KL SentralAvis 

If you're considering Regus/IWG, anywhere in the world:

Get every commitment legally witnessed or authorised before you sign, even if the amount seems small. Have your finance team or company policy pre-agreed by them in writing.
Read their House Rules in full before signing — every page. Most of the charges that hurt you later live there, not in the main agreement.
Never trust a verbal assurance. The warm voice at sign-up is not the team that handles your money.
Be ready to fight for every cent back. Their portal is designed to keep your funds inside their system longer than any commitment they make in writing.
Read what current clients are saying — not the brochure

In 2 months, Regus had nearly RM 25,000 of our money inside their system — RM 12,150 retainer they were already holding, RM 6,872 auto-debited on the old office while we were in active dispute, RM 3,804 auto-debited again for the new office in the same month (effectively paying double rent), and a RM 2,047 restoration charge applied before we had even handed over the office. As of today, our money is still visibly sitting in their portal — credited to us on paper, not in our account.

Asking for a small downgrade was the trigger. Here is how it actually works once you are in:

1. They take money before due dates. Silently. Card on file, no notice. You find out from your bank.
2. Want to remove your card? Portal blocks you. Their "you can remove it any time" is fake.
3. Want your retainer back? Function disabled on the portal until you raise a bank chargeback and escalate.
4.Said no to offsetting? They will do it anyway, silently, against an invoice you have formally disputed — exactly when you asked for justification on those charges.
5. Rent covers a roof and toilet paper. Everything else is billed extra — activation, restoration, indexation, signage.
6. Rules get rewritten mid-agreement and applied backwards — and only when the change favours them.
7. Bigger clients get exceptions. Small ones get "global policy."
8. Compliance documents (PCI DSS, PDPA)? Asked six times in writing. Ignored.
9. Your personal laptops and phones connect to their WiFi every day. When we documented chronic internet issues and asked for proper diagnostic logs (AP, port logs, packet loss, latency over time), nothing was provided. So you do not know what runs on the network you are using, who has visibility into it, or how secure it is.

Every issue becomes a fight. You explain, document, escalate, repeat. Centre passes you to Helpdesk. Helpdesk passes you back. Senior names are CC'd on 30+ emails but never reply. The warm voices upfront vanish the moment money moves the wrong way.
This is not service. It is exploitation dressed in professional emails.

This is mostly a problem for freelancers, entrepreneurs, and SMEs — clients small enough to be told "sorry, this is global policy" whenever something needs to bend in the client's favour. A "global policy" that, conveniently, no one has ever produced in writing, that contradicts the signed agreement, and that seems to apply only to clients without legal teams.
If their global team operates like this, do not assume any local office will be different. Do not sign — from any country.

Your IT person spent hours to only figure out that there is an issue with internet in our room. Such blatant lies will only show you in poor light. I think we need to now show the email proofs.

On credit card front, until now you did not share any proof of GDPR norms or Malaysia norms that our card is not misused and you did deduct money without any prior notice. We have proofs for the same and we can furnish all the details.

You try to do orchestrated witch hunt filled with ego, and this is unacceptable.

Hopeless services - Internet does not work, they use our registered credit card and deduct money without any authorization, they ignore the emails on top of that. There is no compliance certificate and this is a breach of EU Act. Account: 9509371 | Centre: 1 Sentral, KL

When we asked for PCI DSS Attestation of Compliance, PDPA registration, compliance certification - they never share. We are not going to file a case against them because data privacy breach is very evident.

When we escalate to their senior management, they conveniently ignore the emails.

Please do not take service at Regus.

You have replied that your team contacted us but NONE have contacted me so far! Do not make wrong claims please.