On November 26, 2025, 9Pay 9Pay continued to meet and maintain full compliance with all security requirements of PCI DSS Level 1 - v4.0.1 certification, the latest and most rigorous version of the global payment data security standard.

This marks the third consecutive year that 9Pay has achieved and maintained the highest level of certification, reaffirming the company’s strong commitment to investing in security and strengthening its operational capabilities in line with international standards.
As information security becomes a top priority for financial and technology organizations worldwide, compliance with strict security standards not only ensures regulatory compliance but also plays a crucial role in building trust and safeguarding user data. PCI DSS (Payment Card Industry Data Security Standard) is a global standard for protecting payment card data established by the Payment Card Industry Security Standards Council, which includes major card networks such as Visa, MasterCard, American Express, Discover, and JCB. The PCI DSS 4.0 version introduces more stringent requirements, requiring organizations to demonstrate a high level of proactivity, deep self-assessment capabilities, and strong defensive measures to address increasingly sophisticated cybersecurity threats.
During the 2025 assessment, 9Pay continued its partnership with CMC Cyber Security, a PCI SSC certified Qualified Security Assessor (QSA) and one of Vietnam’s leading security assessment organizations. CMC Cyber Security conducted a comprehensive evaluation of 9Pay’s systems, covering technological infrastructure, operational processes, risk controls, and cardholder data protection measures. The results confirmed that 9Pay fully met all 12 requirement domains with more than 300 detailed criteria under the PCI DSS 4.0 standard, thereby retaining its Level 1 certification, the highest tier granted to organizations processing over six million transactions annually.
Maintaining PCI DSS Level 1 certification for consecutive years demonstrates 9Pay’s unwavering commitment to protecting customer data and highlights the robustness of its technological infrastructure. A 9Pay representative shared: “Information security is always our top priority. Continuing to meet the PCI DSS 4.0 Level 1 standard reaffirms 9Pay’s long-term commitment to investing in technology, people, and processes to ensure every transaction by our users and partners is protected at the highest level.”
The PCI DSS Level 1 certification further strengthens the confidence of partners and customers when choosing to work with 9Pay. Meeting the highest global security standards is a critical foundation that enables 9Pay to expand domestic and international partnerships, particularly with clients in fintech, e-commerce, and financial services industries that require payment providers to meet stringent global compliance standards. This foundation also empowers 9Pay to continue enhancing its services, improving payment solutions, and accelerating the development of new technologies.
With this successful renewal, 9Pay once again affirms its position as one of the most secure and trusted payment gateways in Vietnam, continuing its mission to build a safe, stable, and reliable digital payment ecosystem for both individual users and businesses.