| |
Your Payment Security
When you pay on our site, you can rest assured that your payment is secured. We protect your payment data transfer using 256-bit encryption
technology which was provided to us by Geotrust. This company provides websites who
collect customer details and payment information with encryption codes called "secure-socket layer digital certificates" also known as ssl
certificates (the presence of which causes your url to display "https" on secured payment pages).
Using these certificates, information gets encrypted before it leaves the customer's browser so that even if a hacker were to intercept the
transfer of data, the information he would get would be illegible and look like an ugly pile of random numbers, letters, and symbols. He could
not decipher your personal information. Next, we are partnered with Stripe.com who does our credit/debit
card processing and stores our customer payment details securely. The way this arrangement works is your payment data is encrypted using
undecipherable data encryption and it is sent in this manner directly from your browser to Stripe's servers. Their server computer
program then automatically sends your encrypted payment data over to your credit card provider for verification. The credit card provider
server computer program automatically accepts or declines the card and sends this response code automatically back to Stripe's server which
then forwards the pass or fail response back to your browser. At this point, your browser forwards the pass or fail response code to the
wowbucks.com server. At this time, our server program code runs its own security checks and decides whether to accept or decline your payment.
Note how your browser did not ever send our server your payment information. We only received the pass or fail response code. Our server
also received an auto-generated customer id number from Stripe that we use to generate the charge to your card pending identity verification
and any other security checks we need to make prior to deciding if you are a legitimate customer or someone who is using a stolen credit card.
We are partnered with Signifyd.com who provides us with real-time risk analysis on your credit card info
and your ip address as well as your computer/device "fingerprint". Signifyd will let us know if your device has been reported as having been
used to make fraudulent purchases in the past by any other online merchants in their vast network of partner merchants. They will also be
able to notify us if your credit card has been used excessively that day which would be a clue indicating it may have been recently stolen.
How secure is Stripe, the party who handles my sensitive payment information?
In the case of Stripe.com, who does the storing of your credit card payment data, they have bank-level security and offer their card processing
services to mega corporations all over the world. They are one of Paypal's rivals as one of the leading credit card processing companies. Your
information is safer with them than the majority of websites on the web. Far safer than it is when you hand your credit card to the waitress at
a restaurant! So with these partnerships in place, we can confidently say that your credit card is as safe as possible when you use our site.
But then how do you charge my card on my subsequent visits if you don't store my card info internally?
We store only your auto-generated customer identification number that Stripe, our credit card processing provider,
provides to us when you first use the card with them. When you make a subsequent purchase on our site, we send (again, with 256-bit encryption)
the payment amount as well as your customer identification number over to Stripe's servers automatically and Stripe's servers automatically access
your stored payment information and send that along with the charge amount over to your credit card company for approval. The approval or decline
response code is then automatically created by your credit card company and sent back to Stripe's servers and their servers automatically send the
code back to us. If it was approved, Stripe credits our bank account with the amount of your order. We then generate your redemption code, which
you use on our redeem page, to trigger our automated delivery system that delivers your order to you in-game.
What if I pay with Paypal?
If you choose to use the pay with Paypal option, you are forwarded to their website where you use your Paypal account or use your credit/debit card
to submit a purchase. They then send your payment info to the credit card company servers for approval. When the response code is retrieved from
the credit card companies and Paypal has finished making any fraud risk detection investigations of their own, they forward the approve or decline
response to our servers. We then run our own identity verification checks and risk management algorithms to decide if you appear to be a legitimate
customer or a fraudster using a stolen Paypal account or credit/debit card. If you pass their checks and our checks, we proceed to green light
Paypal to charge you for your order. Upon successful charge confirmation, we generate your redemption code which you use on our
redeem page to trigger our automated delivery system that delivers your order to you in-game.
What if I pay with Bitcoin?
If you choose to use the pay with bitcoin option, your payment is encrypted and sent to Stripe.com for processing. When using this payment method,
our risk as a merchant drops to zero since bitcoin is anonymous, undisputable, irreversable, and permanent. When we get paid with bitcoin, we
don't have to deal with proving to credit card companies that you were the authorized user of your bitcoin account in the event that you wanted
to claim someone else was using your account without your permission. We also don't have to deal with fraudulent claims of item not received. So
we are able to be more lax in these cases. However, we will run some verification just to make your account more secure for future purchases.
For example, we may verify your cell phone or email so that if someone logs into your wowbucks.com account from another ip address, we can require
verification that they are the owner of that account by forcing them to enter a pin that we send to the original account owner's email or phone
number.
|
|
