An Internet Merchant Account (IMA) is an online account set up through your preferred bank which stores the credit card payments from customers when they make a booking on your website.  

This account then transfers the collected funds daily to your designated trust or business account.  

The below slide demonstrates the process and roles Bookeasy, Windcave (formerly SecurePay) and your Internet Merchant Account plays when a payment is processed for a booking: 

How Do I Obtain an Internet Merchant Account?

Contact your bank and inform them you wish to apply for an Internet Merchant Account.  It's important to note that depending on your bank this process can take a while to get sorted.  As a result Bookeasy recommends you commence your application ASAP.

Please note that depending on who you speak with at your bank, they may not know what an Internet Merchant Account is (or they may just refer to it as something else).  Inform the bank that you are setting up a new online booking website where customers will be able to make online payments, and that you will be setting up a secure payment gateway which you intend to connect to your IMA and designated account.

Banking Standards Website Requirements

Before your bank grants your business an IMA, they may also request to view both your Cancellation and Refund Policy, Privacy Policy and your Online Terms and Conditions.  As a result your organisation may need to comply with banking standards for websites prior to approval.

If you have yet determined your all important Tourism Centre Cancellation Policy, the following guide may assist.

Bookeasy has also provided some examples below used by existing clients.

Ministry of Villas

Tourism Top End

Bendigo Tourism

In addition to the above, your bank also reserves the right to decline, deactivate access or terminate any merchant who does not comply with their requirements for the duration of the facility they provide.  They may also require you to display the following on your website (please note this is a guide only):

  • Contact information, including your trading name, Australian Business Number (where required), address, telephone number, fax number, e-mail address and your country of domicile.

  • A complete description of all goods and services you offer on your website.

  • A clear explanation of shipping practices and delivery policy.

  • Transaction currency to be in AUD only.

  • Total costs of the goods or services offered including all appropriate shipping/handling charges and taxes. Where the total cost of the transaction cannot be ascertained in advance, you must include a statement to that effect and provide a description of the method that will be used to calculate it.

  • Images of Card types accepted for payment.

  • Customer service policies, including usual delivery timeframes, and the process if you cannot fill the order for any reason. You must advise your customers within two days if goods are not available.  

  • Export restrictions (if known).

  • Refund/return policy.

  • Consumer data policy.

  • Security capabilities and policy for transmission of payment card details.

You website must not:

  • Contain anything that constitutes or encourages a violation of any applicable law or regulations, including but not limited to the sale of illegal goods or the violation of export controls, obscenity laws, or gambling laws.

  • Offer for sale goods or services, or use to display materials, which may be considered by a reasonable person to be obscene, vulgar, offensive, dangerous, or are otherwise inappropriate.

  • Payment pages provided will be accredited by us or a Westpac accredited provider and must adhere to our security requirements.

  • Each merchant domain name must utilise separate payment pages.

  • Each merchant domain name must utilise separate payment pages.

  • You must require digital certificates to establish a secure browser session between you and your customer when receiving cardholder information via the internet.

  • If any information you provide is untrue, inaccurate, not current or incomplete, we have the right to decline or refuse any and all current or future use of the facility.

Bookeasy also reserves the right (in our sole discretion) to decline, de-activate, or terminate any merchant who:

  • Engages in any activities that infringe the rights of any third party, including, but not limited to the intellectual property, business, contractual, or fiduciary rights of others, or:

  • Has substantially changed its goods or services or other material aspects of the merchant’s website from the time it was approved.

Once the bank approves your application, they will provide you with your Internet Merchant Account number.  Examples of what may be provisioned can be found below:


Merchant ID (aka Terminal Id) – 11 digits 

The ‘0250’ should be the common to all IDs

Commonwealth Bank

CAIC – 15 digits

The ‘31100006’ should be the common

Terminal ID – 8 digits

National Australia Bank 

Merchant ID – 8 digits Terminal ID: 6 digits

St George Bank

CAID – 15 digits The ‘05799820’ should be common for all IDs CATID – 8 digits


Merchant ID (same as the Terminal ID) – 8 digits

Once you have received your IMA, please submit all your merchant information to Bookeasy via this form.  

Bookeasy will then work with Windcave in setting up your online gateway.