Payment Gateway
A payment gateway is the technology layer that securely captures a player's payment details at the cashier and passes them to the banks and card networks that authorise a deposit or withdrawal.
Definition
A payment gateway is the software layer that sits between an operator's cashier and the wider payments system, encrypting and transmitting transaction data so that a deposit or withdrawal can be authorised and settled. When a player pays, the gateway tokenises their card or account details, applies fraud and authentication checks (such as 3-D Secure / Strong Customer Authentication), and routes an authorisation request through the acquiring bank and card network to the player's issuing bank, then relays the approve-or-decline response back to the cashier. It is technically distinct from — though frequently bundled with — the payment processor that actually moves the money and the acquirer that holds the operator's merchant account; a payment service provider (PSP) or orchestration layer typically packages several of these functions together and exposes many payment methods (cards, e-wallets, bank transfer, open banking) through a single integration. The gateway does not itself hold player funds or decide whether to extend credit — it carries, secures, and validates the instruction.
Worked example
A player clicks "Deposit £50" with a Visa card. The cashier hands the card data to the payment gateway, which tokenises it and triggers 3-D Secure, so the player approves the payment in their banking app; the gateway then sends an authorisation request through the acquiring bank and the Visa network to the player's issuing bank, which approves it, and the £50 is credited within seconds. The operator does not keep the full £50 — the PSP charges a merchant fee, say 2.0% plus a £0.20 fixed fee (about £1.20), leaving roughly £48.80 after payment costs. Acceptance rate matters at scale: on £1,000,000 of monthly deposit attempts, lifting the gateway's authorisation rate from 92% to 95% recovers about £30,000 of otherwise-declined deposits, which is why operators often route transactions across multiple gateways.
Why it matters
For a learner, the payment gateway explains how money actually moves in and out of a gambling account — it is the plumbing behind every "deposit" and "withdraw" button, and understanding it demystifies why a payment can be declined, delayed, or made subject to extra verification. For professionals, gateway choice and configuration are a major commercial and compliance lever: authorisation (acceptance) rates directly affect deposit conversion and revenue, payment fees erode margin, and the gateway is a critical control point for PCI DSS security, fraud screening, chargeback management, and the enforcement of rules such as blocked payment methods or KYC/AML checks before funds are released. Because iGaming is often classed as "high-risk" by banks and card schemes, building and maintaining reliable payment integration is one of the harder operational problems an operator faces.
Related
Note: The terms "payment gateway," "payment processor," "PSP," and "acquirer" are frequently used interchangeably in everyday industry talk but are technically distinct roles that a single provider often bundles — verify exactly which functions a given vendor supplies. The fees are illustrative: merchant discount rates and fixed fees vary widely by provider, method, region, and risk classification (gambling is commonly treated as high-risk, attracting higher fees), so the 2.0% + £0.20 figure is an example, not a benchmark. Authentication and available payment methods are jurisdiction-dependent — Strong Customer Authentication / 3-D Secure is mandated under PSD2 in the UK and EEA but differs elsewhere, and some markets restrict methods (for example, the UK has banned the use of credit cards for gambling since April 2020, and whether crypto or specific e-wallets are permitted depends on the operator's licence and local law). PCI DSS applies to card-data handling, but the exact obligations depend on transaction volume and integration type.