Skip to main content
PCI Booking stores and returns card data in a standard XML format. This structure is used when migrating cards via the API and when retrieving card data through token replacement.

Full Card Data

Tokenized (Masked) Card Data

After tokenization, the XML returned by PCI Booking masks sensitive fields:
Differences from the full card data:
  1. The card number shows the first 6 and last 4 digits. The rest is replaced with *.
  2. The CVV is removed entirely.

Card Fields

Virtual Card Fields

Virtual cards include additional attributes on the <Virtual> element inside <BankCard>: