1
Auto-create payment
Platform or merchant API instantly creates a deposit with amount, gateway, and secure callback URL.
Fully automated & secure
The payment infrastructure for agents, merchants, and gaming platforms.
One wallet gateway for Bangladesh mobile banking — end-to-end automated deposits, settlements, and API integrations, secured for agents, merchants, platforms, and customers alike.
Agents
Automated deposit matching and secure commission tracking — powered by web and mobile app.
Become an agent →Merchants
Automatic payment capture, hosted checkout, and instant secure webhooks to your backend.
Explore merchant API →Gaming platforms
Auto agent routing, HMAC-secured API, and automated deposit & withdrawal workflows.
View iGaming integration →
Fully automated pipeline
End-to-end secure
Multi-tenant isolation
Double-entry ledger
HMAC-SHA256 internal API
Real-time webhooks
Fully automated payment pipeline
From payment creation to credited balance — every step runs automatically and securely, with no manual handoffs between systems.
2
Auto-assign agent
The system automatically scores and assigns the best agent with the correct wallet number and account type.
3
Auto-match payment
Customer pays via mobile banking; the automation engine matches TrxID and SMS signals in real time.
4
Auto-settle & notify
Ledger updates, commissions credit, and signed webhooks fire automatically to your backend.
For agents
Automated operations, secure earnings
The system handles deposit matching, ledger updates, and commission tracking automatically — so agents focus on growth, not manual processing.
Automation System
Deposits are detected, matched, and processed automatically end to end. SMS signals from mobile banking are parsed and reconciled in real time — commissions credit to your wallet without manual intervention.
Payment accounts
Link wallet numbers once — the system routes incoming deposits to the right account automatically.
Auto commissions
Earnings calculate and post to your commission wallet on every confirmed deposit — no manual tallying.
Web + mobile
Monitor automated activity from the agent portal or Flutter app with real-time secure notifications.
Secure KYC
Identity verification and account controls protect your profile and payment accounts at every step.
Secure withdrawals
Every withdrawal is PIN-verified and ledger-audited — automated processing with bank-grade security.
For merchants
Automatic payments, secure merchant API
Create payments, capture funds, and receive webhooks automatically — protected by scoped API keys and tenant-isolated settlement controls.
Merchant API
Create and list payments programmatically — the system handles checkout, capture, and status updates automatically.
Hosted checkout
Customers are redirected to a secure hosted page — gateway selection and payment flow run automatically.
Multi-gateway
bKash, Nagad, Rocket, and SSLCommerz — configured per tenant.
Webhooks
payment.completed webhooks fire instantly and automatically to your secure endpoint.
Settlements
Settlement cycles and commission rates run on auto-pilot — configured once, executed automatically by the system.
Order tracking
Track by merchant_order_id with full status lifecycle and custom metadata.
POST
/api/merchant/v1/payments
{
"order_id": "ORD-2026-001",
"amount": "1500.00",
"gateway": "bkash",
"success_url": "https://shop.example/success",
"cancel_url": "https://shop.example/cancel",
"webhook_url": "https://shop.example/hook",
"customer": {
"name": "Customer Name",
"mobile": "01700000000"
}
}
For gaming platforms
Automated iGaming integration, HMAC-secured
Agent routing, deposit matching, and player crediting run automatically — every API call and webhook protected by HMAC signatures and replay controls.
HMAC internal API
/api/internal/* with signature, nonce replay protection, and IP allowlist.
Hosted deposit page
Redirect players to /pay/deposit/{token} — recommended Option 2 integration.
Agent routing
PaymentRouteService automatically assigns the best agent by gateway and account type (personal, merchant, agent).
Deposits & withdrawals
Deposits and withdrawals are created, routed, and settled automatically via secure signed endpoints.
Outbound webhooks
deposit.confirmed and withdrawal events dispatch automatically to your secure callback_url.
Reports & idempotency
Daily summary endpoint plus replay protection for financial operations.
POST
/api/internal/deposits/create
{
"amount": "500.00",
"gateway": "bkash",
"payment_account_type": "personal",
"customer_identifier": "player_12345",
"callback_url": "https://platform.example/hook",
"return_url": "https://platform.example/return"
}
// Response includes payment_url for redirect
{
"payment_url": "/pay/deposit/{token}",
"deposit_uuid": "..."
}
Choose your integration model
For end users
Secure, automated checkout for every customer
Players complete deposits in the browser — the system handles matching, status updates, and balance crediting automatically behind the scenes.
Familiar mobile banking
bKash Send Money, Nagad, and Rocket — the same apps customers use every day.
Clear payment screen
Amount, gateway, and agent number displayed on one screen — no confusion.
Automated status updates
After payment, the pay page polls automatically — customers see confirmation without refreshing or waiting on support.
EN / বাং toggle
Bilingual hosted pay page so players can read instructions in English or Bengali.
Secure & private
Customer data is encrypted in transit and masked on agent-facing screens — privacy built into every step.
Browser-only checkout
No app download — works on any mobile browser with a shareable payment link.
How it works
Three automated paths into the ecosystem — secure onboarding, then the system takes over.
1
Register and get approved
Create your agent account, complete KYC, and wait for account approval before going live.
2
Add your wallet numbers
Link bKash, Nagad, or Rocket payment accounts and configure accepted gateways.
3
Automate and earn
The Automation System processes incoming deposits, matches payments, and credits commissions to your wallet automatically.
1
Secure onboarding
Complete merchant verification and settlement settings through a secure approval workflow.
2
Receive API key
Get a scoped API key with payments.create and payments.read permissions.
3
Auto-settle via webhook
When a deposit completes, a signed payment.completed webhook fires automatically to your backend.
1
API credentials
Receive HMAC-secured API credentials with scopes and IP allowlist for automated integration.
2
Create deposit
Sign and POST to /api/internal/deposits/create; redirect player to payment_url.
3
Auto-credit player
The system auto-matches the payment and sends a signed deposit.confirmed webhook — your platform credits the player instantly.
Secure by design — for every role
Agents, merchants, platforms, and end users are all protected by tenant isolation, role-based access, encrypted API communication, and immutable audit trails.
Tenant isolation
Every query is scoped to the active tenant — no cross-tenant data leakage.
Role-based access
Granular role-based permissions for operators, agents, merchants, and scoped API keys.
Audit trail
Immutable ledger entries and full audit logs for every financial movement.
HMAC internal API
Platform integrations use signed requests with nonce replay protection for deposit routing and webhooks.
Frequently asked questions
Common questions about agents, merchants, platforms, and security.
Anyone can register at the agent portal. After signup you complete KYC and wait for account approval — then the Automation System handles deposit matching and commission crediting automatically.
Merchants are onboarded through a secure approval process. Once active, scoped API keys are issued for automatic payment creation and webhook delivery.
Gaming platforms use the HMAC-signed Internal API. The recommended flow redirects players to WalletGateway's hosted pay page where matching and settlement run automatically; alternatively you can build a custom UI — both use the same automated agent assignment and webhook backend.
bKash, Nagad, Rocket, and SSLCommerz are supported. Each tenant configures which gateways are enabled and agents link their wallet numbers per gateway.
Outbound webhooks to iGaming platforms are HMAC-signed. Merchant webhooks use per-merchant secrets. Internal API requests also require HMAC signatures with nonce replay protection.
Yes. WalletGateway is multi-tenant by design. All database queries on tenant models are scoped to the active tenant — agents, merchants, deposits, and ledger entries never cross tenant boundaries.
Join a fully automated, secure payment network
Register as an agent and join a fully automated, secure payment network — deposits, commissions, and settlements handled for you.