Security Considerations

To ensure compliance with the Payment Card Industry Data Security Standard (PCI DSS), merchants who handle cardholder data must be PCI DSS Level 1 certified. This certification ensures that merchant systems meet the required security standards for processing payment information.

PCI DSS and Coupons

When applying marketing coupons or discounts based on cardholder information, such as the card BIN (Bank Identification Number) or IIN (Issuer Identification Number), merchants must handle cardholder data directly. This requires merchants to be PCI DSS certified.

How Moyasar Simplifies Compliance

Moyasar simplifies this process by handling cardholder data on behalf of merchants. Cardholder information is securely passed directly to Moyasar servers, which ensures the data is protected. As a result, merchants using Moyasar’s API do not need to manage sensitive payment information or obtain PCI DSS certification themselves.

Important Reminder

Merchants who attempt to apply coupons based on cardholder information without the necessary PCI DSS certification risk compliance violations. It's crucial to follow the required procedures to ensure security and avoid potential issues.