Payment Processing & PCI-DSS Compliance

The contract requires a secure, PCI-DSS-compliant payment gateway capable of handling online and phone reservation transactions with full support for tokenization and advanced fraud detection mechanisms. The solution must integrate seamlessly with existing reservation systems to ensure secure, real-time transaction processing while maintaining strict adherence to payment card industry standards. All data handling, storage, and transmission must meet or exceed PCI-DSS requirements to safeguard cardholder information and prevent breaches. The contract is designated as a subcontract under NAICS code 522294 and is issued by the Kentucky Horse Park. Responses are due by September 9, 2026, with no set-aside provisions specified. Performance is expected to occur at an unspecified location identified as “Other,” with no designated point of contact provided. The contracting opportunity is accessible through the Kentucky state portal, and vendors must demonstrate proven experience in deploying scalable, compliant payment solutions in high-volume environments.