B2B lead generation in APAC, country by country

Most advice on B2B lead generation assumes one market, one language, one data law and one big contact database that covers everyone. Asia-Pacific breaks every one of those assumptions. A list that works in Singapore can be half dead in Jakarta, an English opener that lands in Manila can read as cold in Bangkok, and the rules on what you may do with a work email change at every border. This guide covers where B2B leads actually come from in the six Southeast Asian markets most regional teams sell into, and how to turn them into a pipeline without paying a global price for thin local data.

Why APAC lead generation is different

Three things make the region harder than the playbooks suggest. First, data coverage is uneven. Global contact databases are built from the markets where they sell most, so their depth in Southeast Asia is shallower than their headline record counts imply, and it varies sharply from country to country. Second, there is no single company register to anchor on. Every market has its own registry, its own identifier and its own rules on what is public. Third, the law changes at each border. Singapore, Malaysia, Indonesia, the Philippines, Vietnam and Thailand all have personal data protection laws, and they do not agree on consent, on notice or on what counts as a legitimate business reason to contact someone.

The practical result is that APAC lead generation works best as two layers. A company layer tells you which organisations exist, are still trading and fit your profile. A contact layer tells you who to speak to there and how to reach them. Where you can ground the company layer in an official registry, do it: it is the cheapest way to stop dead companies reaching your lists.

The six markets at a glance

Singapore: start from the registry

Singapore is the easiest market in the region to prospect well, because its company register is open. ACRA registers every company and business firm, each carries a UEN for life, and the register can be searched free through Bizfile and downloaded as government open data. That makes the UEN the cleanest join key in the region: two records with the same UEN are the same company, and a year-prefixed UEN tells you when a local company was incorporated. Our explainer on what a UEN is covers how to read one, and the free UEN lookup checks a single company in seconds.

The registry also exposes how much a contact-first list can drift. In our June 2026 study of 278 Singapore employers listed in a leading US-built contact database, only 60.8% matched a live ACRA entity by name. Build the company list from the register, filtered by SSIC industry, status and incorporation year, and only then look for the people. For phone and SMS, check the Do Not Call registry before you dial; email is governed by the PDPA and the Spam Control Act. The Singapore outreach playbook pulls those rules together.

Malaysia: contact-led, relationship-heavy

Malaysia's register sits with SSM, the Companies Commission, and company profiles are sold per search rather than published as bulk open data. For most outbound teams that makes the contact layer the practical starting point: find the decision makers in your segment, then confirm the company is real and trading before a sequence starts. Business runs across English, Bahasa Malaysia and Chinese-speaking networks, and referrals carry more weight than in Singapore, so a warm introduction or a named mutual connection is worth more than a cleverer subject line.

Malaysia's PDPA applies to personal data processed in commercial transactions, and its 2024 amendments added data breach notification and data protection officer duties. The Malaysia PDPA guide for cold email covers what that means for outreach, and the Malaysia outreach playbook covers tone, timing and holidays.

Indonesia: the biggest market, the thinnest data

Indonesia is the largest economy in Southeast Asia and the hardest to cover. Tens of millions of businesses operate there, many of them informal, and no vendor credibly holds them all. Formal companies are registered as legal entities with the Ministry of Law, and business licensing runs through the OSS system, which issues each business an NIB. For lead generation, narrow the target before you search: a sector, a city and a company size band will give you a list you can verify, where a national list of every company will not.

Write in Bahasa Indonesia when someone on your team can reply in it, since it is the default for warmth and trust outside multinationals. The PDP Law has been fully in force since October 2024 and sets out lawful bases for processing that outreach has to fit. See the Indonesia PDP Law guide and the Indonesia outreach playbook.

The Philippines: English-first, SEC and DTI

The Philippines is the most natural second market for an English-speaking team. English is the working language of most B2B business, and titles and seniority map closely to what you already know. Corporations and partnerships register with the SEC, while sole proprietors register their business names with the DTI, so a company that looks unregistered may simply be on the other list. Large BPO, financial services and technology employers dominate many segments, which rewards precise targeting by function over broad lists by industry.

The Data Privacy Act of 2012 is enforced by the National Privacy Commission, which has been active on consent and transparency. The Philippines Data Privacy Act guide and the Philippines outreach playbook cover the detail.

Vietnam: local language, a new data law

Vietnam's enterprises register through the National Business Registration Portal, and the enterprise code doubles as the company's tax code, which makes it a reliable identifier when you need to confirm a company is real. Vietnamese is the language of business and strongly preferred for trust; English works in multinationals, technology and export firms. Only open in Vietnamese if someone on your team can carry the conversation, because a Vietnamese opener followed by an English reply reads worse than an English opener.

Vietnam is also the strictest market here for cold email. Its Personal Data Protection Law (Law No. 91/2025/QH15) has applied since 1 January 2026, and a separate anti-spam decree, Decree 91/2020/ND-CP, requires the recipient's consent before an advertising email is sent. Treat compliance advice written before 2026 as out of date, and take advice from a Vietnamese lawyer before launching a campaign there. The Vietnam outreach playbook covers the current position.

Thailand: DBD data and Thai-first outreach

Thailand's companies register with the Department of Business Development, and each juristic person carries a 13-digit registration number. The DBD publishes basic company information and filed financial statements, which makes it a useful check on size and activity before you invest a sequence in an account. Thai is the language of business and warmth; English works in multinationals and larger Bangkok firms, and relationship-led sectors respond noticeably better to Thai-language messaging.

Thailand's PDPA has been fully enforced since June 2022 and follows the GDPR model closely, including legitimate interest as a lawful basis. The Thailand PDPA guide for cold email and the Thailand outreach playbook cover what that allows.

A lead generation workflow that works across the region

• Define the company layer first: industry, size band, city and company age, per market. Resist building one regional list; six small, precise lists outperform one big vague one.
• Ground the company layer in a registry where you can. In Singapore that is the full ACRA register; elsewhere, use the registry to confirm a company is real before it enters a sequence.
• Find the people second. Search for the titles that own the problem you solve, and check how many matches a segment has before you pay to reveal anyone.
• Verify every email before the first send. Regional data decays fast, and a bounce rate above a few percent damages the sending reputation of every campaign on that domain.
• Match language and timing to the market: a Thai opener for a Thai relationship-led buyer, no sends into Hari Raya, Tet or Songkran week, and business hours in the recipient's time zone rather than yours. For Singapore, the B2B cold email templates for Singapore are a tested starting point.
• Build suppression in from day one. Every send needs a clear opt-out, and an opt-out in one campaign has to hold in all of them. That is the common thread across all six data laws.

Common questions

Is there a single B2B database that covers all of APAC? Not one that covers it evenly. Global databases are deepest where their customers are, and coverage in Southeast Asia varies by country, sector and seniority. Check the match count for your exact segment in each market before you buy, and treat headline record counts as marketing rather than coverage.

Is it legal to cold email B2B prospects in Southeast Asia? It depends on the market. Singapore's PDPA has an explicit business contact exception for role-relevant email to a work address. The Philippines and Thailand allow targeted B2B email on a legitimate interest basis, subject to notice and the right to object. Malaysia has no B2B exception, so consent and the right to opt out by written notice carry more weight there. Indonesia rests on a legitimate interest argument that has not yet been tested, and Vietnam requires consent before an advertising email. Read the guide for each market you send into. This is general information, not legal advice.

Should we write in English or the local language? English works across Singapore, the Philippines and most multinationals everywhere. In Indonesia, Vietnam and Thailand the local language builds trust faster, but only write in a language someone on your team can reply in.

Where HuntSales fits

HuntSales is built for exactly this split. In Singapore, Companies Search covers the full ACRA register free on every plan, filtered by SSIC industry, status and incorporation year. Across the region, People Search finds B2B decision makers with a free match count before you spend, and work emails are found when you add someone to your CRM, with a deliverability check on every address found. Campaigns carry an unsubscribe path on every send, opt-outs flow into suppression automatically, and pricing is in SGD. For Singapore specifically, how to find B2B leads in Singapore goes deeper, and plans and credit costs shows what each step costs.