Secure Payments on CHI
When you purchase tickets on CHI Tickets, CHI PWA, or CHI App, your payment information is protected by multiple layers of industry-standard security. This article explains the measures in place to keep your financial data safe.
PCI DSS Compliance
CHI Tickets, CHI PWA, and CHI App process payments through our payment orchestration layer, a platform that is fully PCI DSS (Payment Card Industry Data Security Standard) compliant. PCI DSS is the global security standard established by major card networks (Visa, Mastercard, American Express, and others) to protect cardholder data.
What this means for you:
- All payment processing meets the strictest industry requirements for handling card data.
- Regular security audits and assessments are conducted to maintain compliance.
- Your card details are handled according to protocols mandated by the card networks themselves.
Tokenization
When you enter your credit or debit card details during checkout, the card information is tokenized before it reaches CHI Tickets servers.
| Concept | Explanation |
|---|
| Tokenization | Your actual card number is replaced with a unique, randomly generated token |
| Token usage | The token is used to process the payment without exposing your real card number |
| Security benefit | Even if data were intercepted, the token cannot be used to make unauthorized purchases |
Tokenization ensures that your full card number is never stored, logged, or accessible on CHI Tickets infrastructure.
HTTPS Encryption
Every page on CHI Tickets is served over HTTPS (Hypertext Transfer Protocol Secure). This means:
- All data transmitted between your browser and CHI Tickets servers is encrypted using TLS (Transport Layer Security).
- Encryption prevents anyone from intercepting or reading the data in transit, including your payment details, personal information, and session data.
- You can verify this by looking for the padlock icon in your browser's address bar when visiting tickets.chi.app.
Trusted Payment Gateways
CHI Tickets supports payments through well-known and trusted payment methods:
- Credit and debit cards — Visa, Mastercard, and other major networks processed through our payment orchestration layer.
- Apple Pay — Apple's secure mobile payment system, which uses device-specific tokenization and biometric authentication (Face ID or Touch ID).
- Google Pay — Google's payment platform, which also uses tokenization and does not share your actual card number with merchants.
Each of these payment methods has its own additional layer of security, including fraud detection, transaction monitoring, and buyer protection programs.
No Card Storage on CHI Tickets
CHI Tickets does not store your credit or debit card details on its own servers. Here is how the payment flow works:
- You enter your card details into the secure payment form during checkout.
- The card information is sent directly to the payment processor over an encrypted connection.
- The processor tokenizes the card data and processes the transaction.
- CHI Tickets receives a confirmation of the payment result (success or failure) along with a transaction reference, but never your full card number.
This architecture means that even in the unlikely event of a data breach on CHI Tickets infrastructure, your card information would not be exposed.
3D Secure Authentication
For added protection, many transactions on CHI Tickets require 3D Secure (3DS) authentication. This is an additional verification step mandated by your card issuer:
- After entering your card details, you may be redirected to your bank's authentication page.
- You verify the transaction using a one-time password (OTP), biometric confirmation, or your banking app.
- Once verified, the payment is completed.
3D Secure helps prevent unauthorized use of your card, even if someone else has access to your card number.
What You Can Do to Stay Safe
While CHI Tickets takes extensive measures to protect your payments, here are some additional steps you can take:
- Keep your browser updated — Modern browsers include the latest security patches and TLS support.
- Avoid public Wi-Fi for payments — Use a secure, private network when making purchases.
- Check for the padlock icon — Always verify that the site uses HTTPS before entering payment details.
- Enable transaction notifications — Turn on SMS or push alerts from your bank so you are immediately aware of any charges.
- Use Apple Pay or Google Pay — These methods add an extra layer of device-level security and do not expose your card number to the merchant.
Tip: If you ever notice an unauthorized transaction related to a CHI Tickets purchase, contact your bank immediately and reach out to CHI support with your order details.