Payment security

An encrypted connection on every page

Every page of this site, including the booking and payment steps, is sent over HTTPS with TLS 1.2 or 1.3. Your browser is told to refuse an unencrypted connection to this site (HSTS), and an address typed with http:// is moved to https:// before anything loads.

Card payments on Stripe's checkout

Card payments are taken on the secure checkout page of Stripe, a payment provider certified to PCI DSS Level 1, the highest level of the card industry's security standard. Your card number, expiry date and security code are typed on Stripe's page and never reach this site or the stadium's staff. When your bank requires it, Stripe asks you to confirm the payment with 3-D Secure — a code or an approval in your bank's app.

PromptPay in your own banking app

A PromptPay payment is a QR code you scan and pay from your own banking app. The stadium receives only the amount and the reference of the payment — never your bank login, PIN or balance.

How a payment is confirmed

An online payment is confirmed by the payment provider itself. Stripe and the PromptPay provider each send our system a digitally signed confirmation; the signature and the amount are checked against your booking before it is marked paid and your voucher is emailed.

Who can see your booking

Booking details can be opened only by the stadium's own staff, each with a personal account. Passwords are stored only in hashed form, repeated sign-in attempts are limited, each role sees only what its job needs, and changes to bookings and payments are recorded with the name of the person who made them.

Your details, kept to what a booking needs

We keep only the details a booking needs, as set out in our privacy policy, and they are never sold. Booking records are backed up every night to a separate location, so a fault on the server does not lose your booking.

How to tell it is really us

Fake pages and messages sometimes copy well-known venues. Before you pay, check that:

• the address bar shows patongboxingstadiumticket.com with a padlock
• card details are typed only on Stripe's checkout page (checkout.stripe.com)
• the phone numbers and email you contact are the ones listed on this page
• nobody has asked for your card number, security code, OTP or banking password by phone, chat, WhatsApp or email — the stadium never does

Report a problem

If you see a payment you do not recognise, a site or account pretending to be ours, or a security problem on this site, email booking@patongboxingstadiumticket.com or call +66 80 535 4042. Add your booking number if it is about a booking. Reports go to the team that runs this site.