- eCOMMERCE CARD PAYMENT GUIDE
- PAYMENT PROCESS
- During the transaction
1. The Holder chooses and validates the items to be paid for presented by the Acceptor on its website.
2. The Payment System presents the Holder with an electronic payment request form on behalf of the acceptor. This payment request, based on the information communicated by the Acceptor on its website in the format required by the CMI, binds the Acceptor.
3. The Holder enters the Card number, its expiry date, the CVV 2/CVC 2 (3 digits written on the back of the Card, to the right of the number printed on the signature panel), his first and last name. If it is a Card subject to a process of authentication of the Holder by its issuing Bank, it will automatically be subject to this process before processing the payment authorization request by the Electronic Payments platform.
A. If the Payment System rejects the authorization request, it sends a refusal message to inform the Holder. The Acceptor undertakes to obtain an authorization for the amount of the Transaction, online via the System:
a. A Transaction refused by the Payment System is not guaranteed and will be systematically rejected to the Acceptor.
b. A “prohibited” type response, made by the System, cancels the guarantee for all Transactions made subsequently on the same day and with the same Card for the same affiliation number.
B. If the Payment System accepts the authorization request, the Payment System will manage the processing of the transaction:
a. By confirming to the Bearer, the receipt and authorization of his request for payment by issuing an electronic receipt (hereinafter "ticket").
b. By communicating to the Acceptor via its website all the data relating to the authorized Transaction, with the exception of the Bearer's confidential banking data, such as the bank card number, the expiry date of the card and/or any information considered as such by the legislation in force.
c. By processing responses received from the Acceptor regarding notices of confirmation or cancellation of authorizations. The parties expressly agree that the authorization confirmation notices are communicated to the CMI under the full and entire responsibility of the Acceptor.
After the deal
The Acceptor agrees to:
1. Transmit to the CMI via the payment platform within four (4) calendar days, the confirmation of the transactions.
After this period, the recordings could be subject to final unpaid bills from the issuing bank, in accordance with the VISA and Mastercard regulations in force.
• CMI will process each business day, the Transactions received from the Acceptor and will order the payment of the corresponding amount after deduction of the commissions including tax agreed in the specific conditions of this contract.
• The CMI reserves the right, in the event of duly substantiated doubt on one or more Transactions, to pay the Acceptor only after successful collection of the Transaction(s).
• In all cases, the Acceptor must ensure that the confirmed transactions have been credited to his account within the time limits and in the manner provided. CMI will email a daily statement of paid Transactions to the Acceptor.
2. Communicate at the request of the CMI, within eight (8) calendar days, any proof of the Transactions subject to an unpaid. Failing this, the CMI will charge the unpaid amount to the Acceptor.
3. Transactions are guaranteed by CMI subject to compliance with all of the measures for which the Acceptor is responsible and defined herein, except in the event of a complaint by the Cardholder who disputes the actual reality or the amount of the transaction.
4. All security measures are independent of each other. Thus, the authorization given by the System is only guaranteed subject to compliance with the other measures. In the event of non-compliance with only one of these measures, the Transactions are settled only subject to successful collection.
SECURITY OF EXCHANGES
For the security of online payment transactions, the CMI uses the SSL protocol as standard for the encryption of the order information of the merchant site, the customer's bank details and the transaction management screens intended for merchants. For this, the CMI is equipped with SSL security certificates signed by recognized certification authorities.
1. Security is ensured at several levels.
• On the merchant site, each online payment request is accompanied by a hash code generated by an algorithm hash and a secret key. This key is generated by the merchant and is configured in his payment gateway administration area.
• On the platform, the same hash algorithm is used with the merchant's shared secret key to authenticate the merchant site and verify that no element of the payment request has been modified during its transfer on the network.
• The entry of information necessary for financial processing is secured by the SSL protocol with other algorithms not described in this document.
The cryptographic functions are not accessible to the user and a fortiori cannot be modified or supplemented.
TERMS AND CONDITIONS
Article 1: Entirety of the Contract
This Contract consists of the Special Conditions on the front, the General Conditions below and the annexes; "Appendix 1 eCom permanent and irrevocable direct debit order" "Appendix 2 eCom deposit of guarantee" and "Appendix 3 eCom guide to online payment by bank cards" which the Acceptor acknowledges having received and approves without reservation, upon signing this Contract.
Article 2: Designations & Abbreviations:
“CMI”, abbreviation designating the Center Monétique Interbancaire.
"Acceptor", any merchant adhering to this Contract, offering the service of payment of goods, services or debts via the Internet network and accepting payment by card, by m-wallet or any other means of payment certified by the CMI.
"e-Commerce" means the sale of goods, services or the settlement of debts via the Internet by cards, m-wallet or any other means of payment certified by the CMI.
“Bearer” means the holder of the card, the m-wallet or any other means of payment certified by the CMI and accepted within the framework of the service mentioned above.
"Card", generic term designating all the cards backed by the payment systems indicated in the special conditions.
"m-wallet", the payment application installed on a smartphone or any compatible device allowing mobile payments to be made according to the national standard.
“Contract” means this deed.
"Transaction" means the transaction of remote settlement by the holder, of any purchase of goods or provision of services or settlement of debts with the Acceptor, via the internet, by means of the card or any other means of payment. certified by the CMI.
"Merchant Site" means the Acceptor's website or any other channel for the sale of goods, services or consultation of receivables, allowing the Holder to initiate Financial Transactions accordingly.
"telepayment system", means the information system consisting of the Payment platform, the Electronic Payment Platform and the procedures governing the processing of payment Transactions by card or any other means of payment certified by the CMI, via the Internet. The Online Payment System is made up of the following elements:
- "Payment Platform", means the payment gateway accessible via the Internet and made available to the Acceptor by the CMI, allowing the Holder to order a Transaction in favor of the Acceptor. The Payment platform also acts as an interface with the CMI Payment Platform and ensures that Transactions are carried out in a secure environment. - "Electronic Payment Platform", means the CMI's technological platform enabling the processing of payment authorization requests by Card or any other means of payment certified by the CMI, initiated by the Holder.
- "Mobile Platform", means the technological platform allowing the processing of interoperable mobile payments made by m-wallet according to the national standard.
"Online payment service" means the electronic payment service offered by the Acceptor to its customers on its merchant site via the Internet channel.
“Unpaid” means any Transaction rejected by the card-issuing bank, after its clearing.
"Fraud" means any Transaction whose very authenticity is disputed by the card-issuing bank, following a complaint received from its customer who is the holder of said card.
"Deposit" means the amount set by the CMI, based on the analysis of the figures provided by the merchant in the merchant questionnaire (projected turnover, ticket/average basket, number of Transactions, etc.) and the assessment of the electronic payment risk incurred by the merchant, taking into account his activity. The deposit thus fixed will be constituted by the retention of the first Transactions validated by the merchant and processed by the CMI. Once established, the deposit will be kept by the CMI throughout the effective term of the Contract.
Article 3: Definition of payment systems
The payment systems VISA, MASTERCARD, UnionPay and the national brand CMI consist of the use of the registered trademarks: "VISA, VISA ELECTRON", "MASTERCARD, MAESTRO", "CMI", and " UnionPAY” as they appear on the publicity documents delivered to the Acceptor.
The role of the CMI is to process, within the framework of this Agreement, all Transactions carried out using the VISA/MASTERCARD/UnionPay/CMI systems in order to allow collection on behalf of the Acceptor. Any subscription to another system will be the subject, where appropriate, of communication. These systems regulate the use of cards bearing their brand, for the payment of purchases of goods or services from Acceptors and this, within the framework of the provisions defined in this Agreement.
Article 4: Provisions relating to the CMI
The CMI undertakes to:
4.1 Transfer to the bank account(s) chosen by the Acceptor within the member banks of the CMI, the sums are due, net of commissions. These transfers are only made by the CMI after having constituted the deposit and this, on the first business day following that of the Transaction processed by the CMI and confirmed by the Acceptor via the Payment platform.
4.2 The CMI also undertakes to send the Acceptor the details of the Transactions settled, daily by email, if the client so wishes, to the email address mentioned in the Special Conditions of this Contract. Electronic statements are available online on the CMI website “www.cmi.co.ma”, Affiliate area, in different formats (Excel, csv, PDF).
4.3 Keep the file of Transactions and ensure its archiving for eighteen (18) months after the date of the Transaction. This file will be kept as proof and will be used for the calculation of remuneration.
4.4 Ensuring confidentiality
Transactions subject to the right of communication provided for by the regulations in force.
4.5 The CMI reserves the right, in the event of doubt about one or more Transactions, to pay the Acceptor only after the successful collection of the Transaction(s).
4.6 Payment transactions are guaranteed subject to compliance with these general conditions.
4.7 Comply with national laws and international standards for electronic payment.
4.8 In the event of non-compliance with the general provisions or with one of the obligations of the Acceptor, the CMI reserves the right to reject the Electronic Transactions concerned. If, however, the Acceptor requests assistance from the CMI for the collection of these Transactions and the CMI deems it useful to do so, the said Transactions will only be settled subject to successful collection. The collection period, in such a case, can be spread over 120 days.
4.9 Also, when an Acceptor asks the CMI to resort to the Arbitration procedure with VISA, MASTERCARD, UnionPay or with Moroccan Issuers, he will have to pay the related costs, in the event of loss. CMI cannot be held liable in the event of failures in the service resulting from events beyond its control and in particular in the event of force majeure or in the event of failures due to the Acceptor's website, the Internet network or systems banking.
Article 5: Provisions relating to the Acceptor
The Acceptor undertakes to use the Payment System, respecting the indications provided by the CMI, and to follow the procedures whose technical terms have been agreed between the CMI and the Acceptor.
The CMI implements the necessary means to allow the conclusion, between the Bearer and the Acceptor, of the Settlement Contract. This Contract defining the services concerned and the means of payment used chosen from those offered by the Acceptor, will be carried out electronically.
The Acceptor is clearly identified by an affiliation number assigned to him by the CMI.
The Acceptor undertakes to:
5.1 Notify the public of the acceptance of the Cards and any other means of payment certified by the CMI through the display, in a visible manner, on the pages of its website, of the signs which will be provided by the CMI.
5.2 Only use the online payment page of its portal for the settlement of Transactions covered by this Contract.
5.3 Apply to the holders of the means of payment the same prices and tariffs as to all of its customers. In any case, the Acceptor must not make them bear, directly or indirectly, additional costs.
5.4 Clearly inform the Holder, on his website, of the procedures and conditions under which he can use his Card or any other means of payment certified by the CMI to carry out E-payment Transactions. The Acceptor undertakes to have the Holder view this information before displaying the payment request form.
5.5 Transmit daily confirmation notices of Transactions to the CMI within a maximum period of 4 days from their completion dates, under penalty of losing the payment guarantee.
5.6 Pay to CMI the commissions and costs incurred, as well as all sums due for the services provided by CMI, under this Agreement.
5.7 Assume full responsibility for its service and content. It makes its own all disputes relating thereto and in particular, those involving data on its website or the content of the services and its contractual commitments. It guarantees the CMI against any complaint or action, emanating from Customers and third parties. The CMI may only intervene on this occasion for the purpose of providing proof of Transactions and messages exchanged during orders.
5.8 Take charge of complaints from customers relating to the service, by applying good practices, laws in force and respecting the general conditions of use of the service.
In addition, the Acceptor hereby expressly consents to CMI charging any unpaid Transaction to it. Thus, the CMI will debit any unpaid, cancellation/credit invoice on the Acceptor's future Transactions.
In the event of insufficient funds to cover the debit movements, the CMI will deduct the balance from the direct debit account declared in the special conditions of this deed. Also, the Acceptor hereby declares to authorize the debits which would be made by his bank, on the order of the CMI, directly from the bank account stipulated in the special conditions, releasing the latter from all liability.
Article 6: Additional terms of operation
Any claim relating to fraud, unpaid bills or litigation is initiated in accordance with the regulations in force and in application of the procedure below.
Upon receipt of an unpaid amount, the CMI will send a notification letter to the Acceptor, specifying the Transaction concerned as well as any useful information.
Upon receipt of the notification, the Acceptor must identify the Holder who made the payment and must provide all the additional information required by the CMI within 8 calendar days.
Failing this, the CMI will charge the unpaid amount to the Acceptor and will refund the sums wrongly collected by the latter.
6.1. Claims by the Acceptor:
Any claim must be made in writing to the CMI, within a maximum period of three (3) months from the date of the disputed transaction. In the case of a complaint relating to an unpaid amount, this period is reduced to 15 calendar days from the date on which the unpaid amount was charged. The Acceptor must inform the CMI as soon as any malfunction of the System is observed, within a maximum period of 48 hours.
6.2. Use of logos and trademarks:
The CMI may use, reproduce and represent on all media, in particular online, the logos, designs or trademarks used by the Acceptor with regard to its customers, for the execution of the service of online payment, for the duration of the Contract. The CMI authorizes the Acceptor to use its logo and the signage of means of payment or any other signage required for the performance of the service covered by this Contract. The interest of this use is to recall that the Payment Transactions by card or any other means of payment certified by the CMI, carried out on the Acceptor's website, are operated subject to compliance with the graphic charter which will be communicated to it when the service is activated.
6.3. Reimbursement:
Transactions settled by Cards or by mobile wallet may, in certain cases, at the initiative of the Acceptor, give rise to a partial or total reimbursement by the Acceptor to the Holder. Reimbursement of the Holder must be validated via the Payment platform and is only possible if the account of the Acceptor held in the books of the CMI allows it.
6.4. Copy of this Agreement:
The Acceptor expressly authorizes the CMI to provide a copy of this Agreement to its bank if the latter so requests.
Article 7: Fight against fraud
CMI may be required, in the context of the fight against fraud, to communicate information concerning the Acceptor, which the latter expressly authorizes. In general, the Acceptor undertakes to cooperate under the best conditions with the CMI to fight against the fraudulent use of means of payment.
Article 8: Rates of the service
The rates applicable to the service appear in the special conditions.
- Commissioning costs: are due and payable in one go upon signing this Contract and non-refundable in the event of termination of the Contract. All payments must be made by check made payable to the Center Monétique Interbancaire or bank transfer to its bank account No. 190 780 21211 51757 200 200 84 domiciled at Banque Populaire. Otherwise, they are debited by the CMI before payment of the funds collected.
- Management fees: are due as soon as the Transaction is confirmed by the merchant and applicable to the total amount paid by the bearer.
They are collected by the CMI in accordance with the procedures described in article 4.1.
Article 9: Modification of the conditions of the Contract
9.1 The CMI may modify at any time, for reasons of a technical, financial, regulatory nature or relating to the security of the Transactions, the present conditions of membership agreed with the Acceptor, by amendment. or by any appropriate means of information, free for the latter to adhere or not to the said modification and to terminate, if necessary, this Contract.
9.2 Failure to comply with the new conditions, within the time limits, may lead to the termination of the Contract.
Article 10: Duration and Termination of the Contract
This Contract is concluded for a period of one year with tacit renewal unless terminated by one of the parties.
10.1 The Parties may, at any time, without justification, subject to 60 days' notice (unless otherwise agreed by mutual agreement) and subject to the outcome of the Transactions in progress, terminate this Contract, without it being necessary to carry out any other formality than sending a registered letter with acknowledgement of receipt.
10.2 In the event of termination of this Agreement, the amount of the deposit constituted may only be returned to the merchant after retention of any unpaid amounts and this within 120 days, counted from the date of the last Transaction.
10.3 Any cessation of activity, assignment or transfer of the Acceptor's goodwill entails the immediate termination of this Agreement by the CMI, subject to the outcome of the operations in progress. In the event that, it would appear unpaid after termination of the Contract, they will be the responsibility of the Acceptor or may be the subject of a statement of claims.
10.4 The CMI reserves the right to interrupt its service and terminate this Contract at any time and as of right, without giving rise to the right to compensation for the benefit of the Acceptor in the event of serious misconduct, in particular:
- Non-compliance with any of the terms of this Agreement;
- If the content of the Acceptor's service or the related advertising proves to be illegal and/or likely to harm the image or interests of the CMI;
- In the event of a complaint from customers for facts attributable to the Acceptor and damaging the image of the CMI;
- If the number of complaints relating to non-compliant or non-compliant services received by customers rises abnormally.
Article 11: Attribution of jurisdiction
11.1 This Contract is governed by Moroccan law subject to CMI's commitments vis-à-vis international rules and practices (Visa, Mastercard).
11.2 Any disputes that may arise in connection with the interpretation or execution of the provisions of this Contract will be submitted to the courts of Casablanca.
Article 12: Processing of personal data
Pursuant to the provisions of Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data, and in accordance with the deliberation in force of the National Commission for Control of the Protection of Personal Data (CNDP) relating to the keeping of the customer's account and the management of the operations relating thereto, the Customer gives consent to the Center Monétique Interbancaire for the purpose of process personal data for the management of customer accounts;
The Client further agrees that his personal data be communicated to the parent company of the CMI, to its subsidiaries, to its subcontractors, to other establishments holding accounts for the transfer of funds, to intermediaries for the execution of certain operations banks, competent or authorized supervisory authorities, information centres, duly authorized insurance companies and brokers, authorized beneficiaries, guardians and agents.
The personal data collected may, during various operations, be transferred abroad. This transfer is authorized by the CNDP under number T-GC-11/2016. The Customer, proving his identity and in accordance with the law 09-08, has a right of access, to his personal data, a right of rectification of these as well as a right of opposition, for legitimate reasons, to the processing of his data. To exercise his rights, the Customer may contact his sales office. This processing has been authorized by the CNDP under number A-GC-460/2015.
In addition, the customer (e-merchant) undertakes to comply with the regulatory provisions relating to the processing and protection of the personal data of the users of its E-commerce platform, in accordance with Law No. 09-08 and the stipulations of deliberation n° 508-AU-2014 of 14/11/2014 established by the CNDP and relating to the standard model declaration model concerning the processing of personal data relating to online sales.