The Commercial Bank of Ceylon has announced that it has entered into a long-term Technology Services Master Agreement with Bancstac, to deploy a secure, compliant, scalable and fully bank-controlled payment processing infrastructure, reinforcing the Bank’s leadership in digital financial services.

Commercial Bank will instruct merchants to integrate with its Internet Payment Gateway (IPG) and associated technology modules to process online and card-not-present transactions. The solution establishes a direct, secured and encrypted connection between the Bank’s core systems and Bancstac’s payment infrastructure, with no reliance on third-party intermediaries. Both authorisation of transactions and the settlement of funds will continue to be routed through the Commercial Bank switch, a product of Euronet Worldwide, ensuring that transaction processing remains under the Bank’s full visibility and governance.

The Commercial Bank IPG currently supports Visa, Mastercard and UnionPay, and will be enhanced to include JCB and Sri Lanka’s own National Card Schemes. It also supports LankaQR and other non-card payment methods, reinforcing the Bank’s strategy to expand e-commerce, QR acceptance and alternative digital payment channels.

Through this single integration, Commercial Bank gains access to a comprehensive Bancstac technology suite with 24/7 monitoring, proactive alerting, operational support, issues resolution, merchant integration assistance, and continuous system maintenance and upgrades covering  merchant onboarding and administration tools, advanced fraud mitigation and risk management capabilities, compliance enhancements for continuous regulatory and payment network participation obligations, refund and chargeback handling, tokenisation, hosted payment pages, scheduled payments, simplified e-commerce features and batch payment processing. The Bank receives transaction data, system logs, and automated reporting, reconciliation and settlement information, enabling the Bank to verify the accuracy of fee calculations and transaction integrity in real time. Bancstac maintains the highest global payment industry security certifications and standards, including PCI-DSS and PCI-3DS certifications, management systems aligned with ISO 27001 information security standards, and data protection and privacy standards compliant with GDPR.

Importantly, Commercial Bank retains full authority over merchant onboarding, access management, reporting visibility, system usage and end-to-end fee assessment. The agreed monthly fee structure is designed to be transparent, predictable and cost-effective, with the Bank maintaining oversight of all merchant interactions, refund approvals and risk management processes. The solution meets all of the Bank’s compliance and data security requirements, and the regulatory requirements of the Central Bank of Sri Lanka relating to payment processing and data protection.

Mr Seevali Wickaramasinghe, Chief Manager – Card Center at Commercial Bank said the agreement marks a decisive step in the Bank’s digital transformation journey. “This long-term partnership with Bancstac enables us to modernise our payment gateway infrastructure with direct connectivity, full operational visibility and complete governance control. By adopting a fully secured and scalable technology stack, we are strengthening our capacity to support the rapid growth and innovation of e-commerce and digital payments in Sri Lanka, while ensuring that transaction processing remains firmly within the Bank’s risk and compliance framework,” he said.

Mr Evan Lau, CEO-Bancstac, said: “We are deeply committed to delivering secure sovereign financial infrastructure and future-ready payment technologies in support of the Bank’s ambition to provide a reliable, modern and secure digital payment experience to merchants and customers. Our strategic collaboration with Commercial Bank brings together advanced payment gateway and orchestration capabilities, continuous innovation, PCI-DSS and PCI-3DS certified infrastructure and industry leading operational support under a single, integrated framework. This collaboration also allows the Bank’s merchants to apply directly to Bancstac to seamlessly enable payment acceptance from American Express, Discover Network and Diners Club cardholders.”

The Bank said merchants using the Bank’s acquiring services will gain access to a continuous pipeline of future payment innovations that will be seamlessly launched within the Commercial Bank IPG without the need for any additional integration work by merchants.  Digital transactions will be processed through this enhanced payment infrastructure and direct gateway-to-bank connectivity, which translates into higher authentication rates, faster authorisations, strengthened security, smoother payment experiences with fewer transaction failures and greater system uptime. Merchants will have access to multiple global card schemes, QR-based options, seamless refunds and dispute resolution supported by the Bank’s robust governance framework. This strategic collaboration represents a significant milestone in Commercial Bank’s ongoing digital transformation initiatives and aligns with Sri Lanka’s broader shift toward a digital-first financial ecosystem.