Tokenisation API

A. What is Tokenisation API?

Tokenisation allows merchant to charge customer’s credit card without the need to enter the credit card details (name, card number, expiry date and CVV). To get this feature in your dashboard, you can notify us by sending a ticket from the dashboard. This application shall be subjected to senangPay's approval which we will review at our own discretion. Merchants must provide us the Terms of Contract between merchant and other party users.

B. How does it work?

Merchant’s customers will enter their credit card details one time only. During this one time process, senangPay will validate the card to make sure the card is valid by charging an amount of RM1 to the card. Not to worry that this amount will be voided later. Meaning that the transaction will never appeared on the customer’s credit card statement.

If senangPay failed to charge the card, meaning that the card is not valid. Once validated, the card’s info will be stored in senangPay’s server (PCI-DSS certified).

C. API List

1. Get token

We have developed a new secure way of generating token for our tokenization payment. In this new feature, card holder is required to pass the OTP (3D secure) check before able to get the payment token. Also, there are few extra layers been added to ensure no non authorised card being used for this tokenization payment feature.

2. Pay credit card using token

2.1 Authorisation Header (Basic Auth)

2.2 Request Parameter (All Mandatory)

2.3 Response Parameter

2.4 Sample Response

{
   "status":1,
   "transaction_id":"14951544812820",
   "order_id":"1234",
   "amount_paid":1000,
   "msg":"Payment was successful",
   "hash":"99b6e99bb0aa663101b1e4f6f8d69c2efb41ef81a5a7aa030bf76a098a03d233"
}

3. Enable/disable credit card

3.1 Authorisation header (Basic Auth)

3.2 Request Parameter (All Mandatory)

3.3 Response Parameter

4. Validate payment token

4.1 Authorisation header (Basic Auth)

4.2 Request Parameter (All Mandatory)

4.3 Response Parameter