To my understanding Malomatia is not a government organization. They did originate from ICT Qatar who is 'sort of' government but do weird things including marketing of services, including Malomatia services, that makes it unclear whether they are government or not. (Just to clarify, ICT of a country is supposed to be an independent governing body but this is not the case in Qatar).

A PCC was not a requirement up to about 3 years back, but I'm pretty sure you need it before you will get CID clearance, which is required before your company can officially sponsor you. Not sure why you did not need this at Vodacom, but a possible reason could be that Vodacom operates from the 'Free Zone' area of QSTP and does not fall under the 'normal' rules. For Malomatia your friend will most probably need one.