Receive card from owner and relay to hotel

This guide will discuss the process of collecting the card details directly from the card owner and then sending it to the hotel.
PCI Booking offers multiple methods to achieve this task and selecting which options you would like to use is based upon your individual scenario and use case. The following table will provide the list of the options available to you:

Ways to collect card detailsWays to share card details
1. Use the card capture form in your web site
2. Use the Card Over The Phone to send the link to the customer.
1. Use the Token Replacement to send the card to the hotel's API.
2. Use the Card Display Form in your management portal.
3. Use the Branded Card Display Iframe in our portal.

This guide will use, as an example, the Card Over The Phone method to collect the card and then the Branded Card Display Iframe to display the captured card.

Stage #1: Set up the property

Before you can start interacting with the hotel to provide them with credit card data, you will need to add them as a property.

  • In the PCI Booking portal, add a new property for this hotel.
  • The activation email will be sent to the property for them to set up a username and password.
  • Check the PCI Booking portal to ensure that the property has been activated successfully.
  • Based on your workflow, if you need to display the credit card's CVV to the hotel, set your CVV Retention Policy and include this property as a destination.

Stage #2: Collect the card details

You can use any of our methods to collect credit card details, but for now we will focus on the Card Over The Phone (COTP) method.

  • You will send a request to PCI Booking's API to initiate the COTP request. As a result, PCI Booking will send a link to the card owner - the link can be sent via SMS text message or email.
    • As part of this request, you can provide additional information, such as:
      • Reference number
      • Amount and Currency of the transaction
      • Header and / or footer to be displayed on the capture page
      • Redirect URL to send the card owner to after submitting the card details (for example, to capture additional information such as billing address)
  • The card owner, once received the link, will click it and be directed to a dedicated page in PCI Booking's network where they will enter the card details.
    • The card capture page is mobile friendly and will be displayed properly on a laptop, tablet or mobile device.
    • If requested, once the card has been submitted, a 3D secure prompt will be displayed.
  • Once the card has been submitted, PCI Booking will validate, store and tokenize the card and send a callback message to your system with the status of the request and the token ID.

Stage #3: Display the card

You can use any of our methods for displaying the credit card details, but for now we will focus on the branded card display method.

  • Provide the hotel with the branded card display link
  • The hotel will log in to the PCI Booking portal (using the credentials they have set up during activation) and view the card details.
  • Based on your workflow, delete the card details as needed.