From Wiktionary, the free dictionary
Literally, “(it's) calm water, (but) don't think there are no crocodiles”
air yang tenang, jangan disangka tiada buaya
- (idiomatic) A calm person or situation is not to be mistaken for one that is not actually threatening or fierce; still waters run deep.