BBMSL Online Payment Service
BBMSL Online Payment Service lets merchants accept online payments through a secure, reliable API. Choose between a BBMSL-hosted payment page or a fully controlled direct integration, depending on your payment flow requirements and PCI DSS compliance posture.
Choose an integration model
| Feature | Hosted Model | Direct Model |
|---|---|---|
| Payment flow | Customization options | Fully controlled |
| Tokenization | ✔ | — |
| Supported digital wallets | Apple Pay, Google Pay, Alipay, AlipayHK, WeChat Pay | Alipay, AlipayHK, WeChat Pay |
| Supported payment methods | Credit card (Visa / Mastercard / UnionPay) | Digital wallet payments |
| PCI DSS requirement | Not required — BBMSL collects sensitive payment data | Depends on the payment method and integration design |
Hosted Model
BBMSL hosts the payment page on your behalf, so your application never handles raw card data directly. This model also supports Tokenization, allowing returning customers to pay without re-entering card details.
Best for: merchants who want a fast integration path and do not currently hold PCI DSS certification.
Direct Model
Your application owns the full payment UI and data flow. This model gives you maximum control over the checkout experience for supported wallet integrations.
Best for: merchants who need a fully custom checkout flow for supported wallet payments.
Get started
All integration models share the same foundation. Follow these steps before writing any integration code:
- Set up your API credentials — generate an RSA key pair and register your public key with BBMSL. See Integration Setup.
- Implement result notifications — build the endpoint that receives and acknowledges payment results from BBMSL. See Result Notification.
- Test in sandbox — validate your integration using the test credentials and card numbers in Test Details before going live.