SANParks South Africa Tender: 5-Year Unified CP/CNP Payment Gateway Services

requires a comprehensive, unified payment gateway solution for Card Present (CP) and Card Not Present (CNP) transactions for a period of 5 years, covering 19 national parks and 100+ operational sites. The solution must integrate seamlessly with SANParks' core tourism systems (reservations, property management, access control, ticketing, e-commerce platforms, Wild Card programme) and support multi-channel transactions (POS, web, mobile, kiosks, API integrations). Key objectives include consolidating payment services, enhancing security and compliance (EMV, PCI DSS Level 1, P2PE, encryption, tokenization, fraud prevention, ACID, DLP, CIA), enabling omnichannel customer experience (contactless/NFC, digital wallets, QR, instant EFT, USSD), and improving efficiency with real-time monitoring, reporting, and reconciliation tools. The service provider must demonstrate multi-bank support capability for all four major South African acquiring banks (FNB, Standard Bank, Absa, Nedbank), with a mandatory transition obligation of 90 days, zero data loss, and minimal downtime (max 4 hours) during bank changes. The gateway services must be hosted on high availability, load-balanced, and scalable servers with fixed IP ranges for whitelisting. Robust API integrations (RESTful HTTP, webhooks, callbacks) for transactional data and reporting are essential, with fine-grain filtering over extended periods. Annexure F (pages 105-125) details ICT Network Infrastructure requirements.

bid is subject to the Preferential Procurement Policy Framework Act and Preferential Procurement Regulations 2022, requiring the submission of a fully completed SBD 6.1 (Preference Claim Certificate) with relevant proof for points claimed. Bidders must also submit a fully completed SBD 4 (Bidder’s disclosure) and the General Conditions of Contract (GCC). The appointed service provider must ensure compliance with EMV, PCI DSS Level 1, and P2PE standards, implementing robust encryption, tokenization, and fraud prevention. The solution must support PCI DSS-compliant payment methods to reduce SANParks' PCI compliance scope. Adherence to the Public Finance Management Act (PFMA) and Protection of Personal Information Act (POPIA) is also required. Failure to support a required bank transition constitutes a material breach of contract and may result in termination without penalty to SANParks.

will be evaluated in Phase 4 (pages 55-60). The procurement aims for financial optimization, targeting a 15-25% reduction in transaction processing costs through consolidated volume pricing and elimination of redundant subscriptions, alongside improved cash flow management via real-time transaction visibility and faster settlement cycles. Bidders must disclose any integration costs for future bank transitions upfront, as no additional licensing fees, platform costs, or early termination penalties will apply if SANParks changes acquiring banks during the contract period. A fixed cost schedule for future bank transitions (or confirmation of inclusion in base pricing) is required as bidder evidence.