Objectives

The primary objective of this tender is to appoint a qualified service provider to deliver an integrated online payment gateway and Point of Sale (POS) solution for the RTMC over a period of five (05) years. The solution aims to support NaTIS operations nationally, ensuring seamless, secure, and uninterrupted revenue collection, transaction processing, reconciliation, and disbursement functionalities aligned with national payment systems and cybersecurity standards.

Scope

The scope encompasses the provision of:

• An integrated online payment gateway supporting card-present and card-not-present transactions, refunds, reversals, and real-time settlement notifications.
• Point of Sale (POS) devices compliant with PCI PTS standards, supporting EMV, Tap, Chip & PIN, QR, Wallets, and integrated with the existing Linux (Ubuntu) environment.
• Merchant account setup supporting automated refunds, chargebacks, and end-to-end transaction traceability.
• Automated reconciliation engine, multi-creditor disbursement engine, fraud detection, case management, and exception handling systems.
• Integration with NaTIS for real-time transaction processing, reporting, and reconciliation.
• Support for future payment rails such as PayShap and biometric payments.
• Support services including 24/7 support, disaster recovery, business continuity, and dedicated account management.
• Implementation of corporate social responsibility initiatives aligned with RTMC’s community and road safety programs.

Technical Requirements

The technical specifications include:

• A PCI DSS Level 1 compliant real-time payment gateway with tokenisation, EMV 3DS, fraud detection, and 99.95% system uptime.
• POS devices supporting EMV, Tap, QR, Wallets, and PIN, with secure firmware and hardware certification (PCI PTS, EMVCo, SABS).
• Integration via REST APIs with all components, including card payment acquisition, disbursement, chargebacks, refunds, fraud management, and exception handling.
• Automated three-way reconciliation between gateway, merchant account, and bank account, with mismatch detection and NaTIS updates.
• Support for daily, weekly, and monthly disbursements to RTMC, RTIA, DLCA, and other beneficiaries.
• Security standards compliance including ISO 27001, POPIA, ECTA, FICA, PCI DSS, PCI PTS, and SSF.
• System features such as real-time dashboards, downloadable reports, velocity checks, behavioural scoring, device fingerprinting, geolocation, and case management.
• Support for future enhancements and additional payment methods.

Skills Requirements

The successful bidder must demonstrate:

• Extensive experience in implementing integrated online payment systems and POS solutions, with references for projects exceeding R50 million in receipts.
• Proficiency in developing and integrating APIs for payment acquisition, disbursement, chargebacks, refunds, fraud detection, and exception management.
• Capability to provide secure, PCI DSS Level 1 compliant systems, including EMV, EMV 3DS, and POS device certification.
• Expertise in system integration within Linux (Ubuntu) environments and compliance with relevant national and international standards.
• Ability to deliver end-to-end transaction traceability, automated reconciliation, and real-time reporting.
• Strong project management skills, including the ability to meet strict timelines, support future payment innovations, and provide ongoing support and maintenance.
• Experience in corporate social responsibility initiatives related to community safety and development programs.