Website payment gateway for EU, UK and Commonwealth merchants.
BazPay is a website payment gateway that ships as a plug-and-play plugin for common regional storefronts and as hosted fields for custom stacks. Cards, wallets and local payment methods sit under one direct regional acquiring contract — no reseller between your website and the network.
Built for e-commerce sellers, subscription software firms and professional-services websites. Hosted fields keep card data out of your website; PCI scope stays at merchant SAQ A regardless of how deep the embed goes.
Why choose BazPay as your website payment gateway
A website with a payment gateway has four axes that matter after launch — brand, PCI scope, method coverage and settlement transparency. BazPay ships all four favourably for merchants across the EU, UK, Australia, Canada and New Zealand.
-
Card fields stay on your website, PAN doesn't touch it
Hosted fields render inside your existing checkout, but the card number, expiry and CVC belong to our PCI environment. Your website stays branded; your PCI scope stays at merchant SAQ A.
-
One integration reaches every regional rail
Cards, Apple Pay, Google Pay, iDEAL, Bancontact, BLIK, pay by bank, PayTo, Interac and SEPA Instant all sit behind one contract. Turn methods on and off from the dashboard — no new plugin per rail.
-
Authentication done right
3-D Secure 2.2 runs only when the risk earns it. PSD2 exemption logic keeps most checkouts frictionless; liability shifts to the issuer on the ones that step up.
-
Regional acquiring on our own licence
No aggregated MID, no reseller between your website and the network. Direct settlement into your local settlement account with interchange++ line detail on every transaction.
Four ways to put the gateway on your website
Four integration modes sit inside the same platform. Pick the one that fits how much DOM control you want to keep — the underlying charge object stays the same across all four.
-
Plug-in
Website payment plug-ins
Maintained plugins install the gateway into WooCommerce, Magento 2, PrestaShop or Shopware in minutes. Checkout, refunds, capture, webhooks and recurring billing are covered on install — configure API keys, save, done.
- WooCommerce
- Magento 2
- PrestaShop
- Shopware
-
Hosted
Hosted checkout page
Redirect the shopper to a hosted checkout page served on your subdomain. The fastest way to a compliant website with a payment gateway when you do not want to touch the DOM.
- Redirect
- Themed
- Mobile-optimised
-
Embed
Hosted fields inside your own checkout
Card, expiry and CVC inputs render inside your existing checkout via a script tag. Your brand and conversion metrics stay intact; PCI scope stays at SAQ A.
- Hosted fields
- Drop-in JS
- Themed
-
API
Server-to-server for custom stacks
If your website is a custom stack, call the REST API directly. Idempotent writes, signed webhooks and a versioned contract keep the integration stable.
- REST
- Idempotent
- Versioned
Step-by-step installation guidance on how to add a payment gateway to your website. Full plugin list on integrations. Deeper embed primitives on integrated payment solutions.
From sign-up to a live checkout on your website
Six stages sit between the first sandbox key and steady-state operations. Each stage is trackable in the dashboard and each stage change fires a signed webhook.
-
Sign up
Open a sandbox account and receive live and test API keys, a webhook signing secret and a dashboard invite in the same session.
-
Choose the surface
Install a plugin, embed hosted fields or call the REST API — the same underlying platform, three different levels of DOM control.
-
Test
Sandbox replays production-shaped decline codes, 3-D Secure 2 flows and dispute events so your website's checkout behaves the same on test and live traffic.
-
Underwrite
Board the merchant. KYC and review runs in parallel with integration work, so you do not queue on one to start the other.
-
Go live
Flip the live API key. Real-time analytics shows approval quality from the first hour on the new gateway.
-
Iterate
Tune fraud rules, retry cadence and payout schedule from the dashboard. Rule changes apply to the next order — no engineering release for a threshold move.
Direct regional acquirer vs reseller website payment gateway
Most website payment gateways in market are resellers layered on top of a downstream acquirer. Direct acquirers exist too — and the difference matters after launch. Below is the trade-off in the terms merchants actually feel.
| Dimension | BazPay (direct regional acquirer) | Reseller website gateway |
|---|---|---|
| Contract holder | Direct with BazPay (regional acquirer) | Reseller PSP on aggregated MID |
| PCI scope | Merchant SAQ A via hosted fields | Full PCI where PAN passes servers |
| 3-D Secure | 3-D Secure 2.2 + exemption logic | Blanket 3DS or none |
| Plugin coverage | WooCommerce, Magento 2, PrestaShop, Shopware | Varies per reseller |
| Settlement | local settlement account, per-scheme cycle | Aggregated payout, common delay |
| Reporting | Interchange++ per transaction | Blended-rate summary |
Rate structure on the pricing page. Buyer's shortlist on payment processors. Ongoing service envelope on gateway services.
Features that ship with the website gateway
Every capability below is on the standard integration. Turn features on with a request flag or a dashboard toggle — no premium tier for hosted fields or the webhook contract.
-
Plug-and-play plugins
WooCommerce, Magento 2, PrestaShop and Shopware plugins ship with checkout, refunds, capture, webhooks and recurring billing wired.
-
Hosted fields
Card, expiry and CVC inputs render inside your website's checkout served from our PCI environment — merchant SAQ A stays intact.
-
Hosted checkout page
Redirect flow served on your subdomain when you do not want any card-adjacent JS in your website's DOM at all.
-
3-D Secure 2.2
Authentication with automatic exemption logic — TRA, low-value, trusted-beneficiary and MIT — so most website checkouts stay frictionless.
-
Gateway vault + network tokens
Card-on-file for renewals and one-click; automatic PAN refresh keeps saved cards alive after reissue.
-
Signed webhooks
HMAC-signed, replay-protected events for every state change; delivery retries on an exponential schedule for up to 72 hours.
-
Idempotent API
Retry-safe writes across create, capture, refund and payout. A network blip never becomes a double charge on the website checkout.
-
Interchange++ reporting
Every settled transaction breaks out interchange, scheme fees and gateway margin — no blended monthly summary to reverse-engineer.
One REST call per checkout, whichever surface you pick
The charge object is the unit of work whether the shopper submits card data via a plugin, hosted fields or a hosted checkout page. Idempotency headers make retries safe and the response object stays stable across every rail.
POST /v1/charges
Idempotency-Key: 8f1c-2b3a-9e4d
{
"amount": 4990,
"currency": "EUR",
"payment_method": "card",
"capture": "auto",
"three_d_secure": "required_if_needed",
"descriptor": "ACME EU LTD",
"metadata": { "order_id": "ORD-10842" }
}The response returns a canonical charge object with the authorisation code and any exemption applied. Full schema in the API reference; handler samples in the developer docs.
Which websites run on a BazPay-shaped gateway
Four merchant profiles already run their website checkout on BazPay. Each uses the same underlying platform — the reporting emphasis and billing cadence differ.
-
DTC storefronts
Brands running WooCommerce, Magento 2, PrestaShop or Shopware selling across our markets. One plugin, one contract, one payout balance.
-
Subscription websites
SaaS and membership sites billing monthly and annual plans with card-on-file renewals and dunning-aware retries.
-
Professional-services websites
Consultancy and agency websites invoicing higher tickets with named-payer trust lists and enforced 3-D Secure 2 over a ceiling you set.
-
Digital publisher websites
Publishers selling ebooks, courses, memberships and paywall unlocks — instant fulfilment on signed webhooks tied to the shopper's charge.
Out of scope for BazPay: adult, gambling, CBD, nutraceutical, forex, CFD, crypto-exchange, debt-collection and MLM. BazPay is not a merchant of record and not a marketplace of third-party PSPs.
Security and compliance signals for the website surface
Card handling runs inside a PCI DSS Level 1 environment assessed each year. Hosted fields and gateway vaulting keep your website at merchant SAQ A regardless of how deep the embed goes. Authentication runs on every card charge with 3-D Secure 2.2 and automatic exemption logic where the rules allow.
- PCI DSS Level 1
- Annual assessment on the acquiring and gateway environment
- Merchant SAQ A
- Hosted fields and gateway vault keep card data out of your website
- Authentication
- 3-D Secure 2.2 with automatic exemption logic on every card charge
- GDPR
- In-region data residency; DPA on request
- SEPA / SEPA Instant
- Direct participation for merchant payouts in supported corridors
Website payment gateway questions, answered
How do I choose a website payment gateway for a regional business?
Filter on four questions: is the entity a direct regional acquirer or a reseller, does it ship a plugin for your storefront (or hosted fields for a custom stack), what is your PCI scope after integration, and does reporting arrive at interchange++ line detail? BazPay is designed to answer all four favourably for merchants across the EU, UK, Australia, Canada and New Zealand.
How do I make a website with a payment gateway if I run WooCommerce, Magento 2, PrestaShop or Shopware?
Install the maintained BazPay plugin for your storefront, paste your API keys from the dashboard, save, and the checkout is live in sandbox. Test flows and go live after underwriting completes. There is no engineering effort beyond the install for standard configurations.
What if my online website with a payment gateway is a custom build?
Custom stacks integrate against the REST API directly. Create a charge with one POST, verify the signed webhook, redirect to 3-D Secure 2 if the response requires it. Hosted fields render the card inputs inside your own DOM so you do not have to run a full PCI environment.
Which payment methods can I accept on my website?
Visa, Mastercard, Cartes Bancaires, eftpos, Apple Pay, Google Pay, iDEAL, Bancontact, BLIK, pay by bank, PayTo and Interac sit under one contract. New methods can be turned on from the dashboard as they roll out — no new integration per rail.
Are there any website payment solutions available for restricted businesses?
Not with BazPay. Underwriting is scoped to merchants in the EU, UK, Australia, Canada and New Zealand: e-commerce sellers, subscription software firms, professional-services businesses and digital publishers. Out of scope: adult, gambling, CBD, nutraceutical, forex, CFD, crypto-exchange, debt-collection and MLM.
How does authentication affect my website's checkout?
Open-finance regulation requires strong customer authentication on most card payments in-region. BazPay claims exemptions where the rules allow — low-value, risk analysis, trusted-beneficiary and merchant-initiated — so most checkouts stay frictionless. When a challenge does fire, liability for that order shifts to the issuer.
What is settlement like once the website is live?
Funds land in your local settlement account per scheme cycle. Every settled transaction breaks out interchange, scheme fees and gateway margin so finance teams reconcile against the source. Refunds and disputes fire as signed webhooks keyed to the same charge ID as the original order.
How long does it take to launch a website with a payment gateway on BazPay?
Sandbox is available the minute you sign up. A store on WooCommerce, Magento 2, PrestaShop or Shopware can be taking test traffic within an afternoon. Production traffic depends on underwriting; merchants in the EU, UK, Australia, Canada and New Zealand typically clear it in a small number of business days.
Add the payment gateway to your website today
Open a sandbox and take a test charge in the same hour. Prefer a walkthrough? A payments specialist can map your storefront, your rails and your merchant acquiring path with you. See also real-time analytics and card and APM processing.