Most advice on this question comes from people selling websites, which makes it worth very little. So here is the honest version, including when you should not bother.
A Facebook or Instagram page is genuinely enough if your customers find you by walking past, if all your selling happens in DMs, and if nobody has ever asked you for a website. Plenty of good businesses run entirely this way. If that is you, keep your RM49.90.
It stops being enough at a specific moment: when someone hears your name somewhere else and types it into Google. A social page ranks badly for your own business name, shows opening hours nobody updated, and gives a supplier or corporate buyer nothing to check you against.
The second moment is when you want to be taken seriously by someone who is not a walk-in customer — a wholesaler, a landlord, a corporate client, a bank. Fairly or not, an email address at your own domain and a site that loads properly changes how those conversations start.
The third is control. You do not own your Facebook page. It can be restricted, hacked or lost, and the reach you had last year is not the reach you have now. A website is the one asset in your marketing that nobody else can switch off.
If none of those three apply to you yet, wait. When they do, it takes a day to fix.