Retail forex with offshore or unlicensed brokers is something the SC actively warns against. Its Investor Alert List names unauthorised websites, products and companies, and it is updated regularly with new entities, many of them forex and CFD brokers that misuse the names or logos of licensed firms. The list is described as a guide rather than an exhaustive register, so a broker being absent from it is not proof it is safe.
Because the brokers behind most bonus offers are not licensed to deal with Malaysian residents, those bonuses are not reliable offers to act on. A deposit match or no-deposit promotion from a firm on, or eligible for, the SC alert list comes with no local protection: if the broker freezes your withdrawal or disappears, there is no Malaysian authority that can compel it to pay.
If you want to trade, the safe route is a broker that is properly authorised to operate in Malaysia, and to treat any aggressive bonus as a reason to look harder, not to deposit faster. Check the SC alert list and the licensed-entity register before funding any account. The headline number matters far less than whether you can actually withdraw.