Developer documentation

Project moderation and website requirements

Last updated:

Before a project can accept live payments through UnitPay, it must pass moderation. Moderation is how we verify that the website is functional, that the merchant entity is identifiable, that the goods or services offered fall within what we are licensed to process, and that the project meets Bank Indonesia and OJK expectations for payment service providers. This page explains how the review works, what your site needs to contain, what we cannot process, and the statuses your project will move through.

How moderation works

Moderation begins automatically as soon as you submit a project for review from the merchant cabinet. Reviews are performed by our risk and compliance team on business days, 09:00–18:00 WIB. In normal conditions a first decision is returned within one business day; complex cases (regulated industries, cross-border models, high-risk MCC codes) may take up to three business days.

The reviewer checks that the site loads, that all internal links resolve, that legal and contact information is current and consistent across pages, that the company and the offered product are described in enough detail for a customer to understand what they are buying, and that the refund and support workflow is documented. Where a licence or accreditation is required to operate, the reviewer verifies that proof is published on the site.

A first decision puts your project into one of two states: a final category (for example, Physical Goods, Digital Services, or Online Education), or the temporary Starter category described below.

The "Starter" category

If the reviewer can confirm that the project is legitimate but needs additional information or fixes before final approval, the project is placed in the Starter category and moved to Under revision status. A detailed checklist of what needs to change is delivered to the Notifications tab in the merchant cabinet and to the project owner's email.

You have 14 calendar days to apply the fixes and resubmit using the Completed link next to the notification. If a project remains in Under revision for longer than 14 days without a resubmission, it is moved to the Archived status and live payments stay disabled. Archived projects can be reopened by contacting support@unitglobalsystem.com.

Final moderation

When all of the reviewer's notes have been addressed, the project moves to final moderation. Final moderation confirms the merchant category code (MCC), enables the payment methods that match the category, and switches the project to Active. From that point on, customer-facing payments and payouts run in production.

Website requirements

The following requirements apply to every public-facing website connected to a UnitPay project. They reflect both our internal risk policy and the minimum disclosure rules that Indonesian consumer-protection and payment-system regulators expect of merchants accepting electronic payments.

  1. Production-grade hosting with a registered domain. The site must respond on a public, registered domain (not a raw IP, not a free subdomain on a development platform) and must serve over HTTPS with a valid TLS certificate.
  2. No content prohibited by the payment-system rules. The site must not host, link to, or promote any of the goods or services listed in the next section.
  3. No links to suspicious third parties. Banners and outgoing links to adult sites, banner exchanges, traffic-arbitrage networks, or unrelated payment aggregators are not permitted on a project page during moderation.
  4. All internal links work; all pages show current information. Dead links, "Coming soon" stubs, mismatched prices between the catalogue and the checkout, or contact details that point to a different company will be rejected.
  5. Visible proof of any licence the business operates under. If the activity is regulated in Indonesia (for example, OJK-licensed lending, BPOM-registered cosmetics, or an educational accreditation), a copy of the licence or registration number must be visible to the customer before checkout.
  6. Mandatory public-facing disclosures. The site must publish, in a place that is reachable from every page:
    • The terms of service or public offer that the customer agrees to at checkout.
    • A personal-data processing policy compliant with UU PDP (Law No. 27/2022).
    • The refund, cancellation, and delivery policy for the goods or services sold.
    • A description of every paid service or product, together with its price, currency, and any taxes included.
    • The full legal name of the merchant entity, its NPWP (where applicable), its registered address, a working email address, and a customer-support phone or WhatsApp number.
    • The logos of the payment methods accepted on the site (card schemes, QRIS, virtual accounts, e-wallets, and the UnitPay mark).

Goods and services we cannot process

Some industries are outside our licence scope, are restricted under Indonesian law, or carry a level of fraud and chargeback risk that we do not accept. We cannot onboard a project, even temporarily, if its primary activity falls into any of the categories below. If your business model only partially overlaps with one of these areas, contact compliance@unitglobalsystem.com before submitting — some sub-categories are workable under additional disclosures.

  • Online gambling, betting, sports-prediction services, and games of chance not licensed by an Indonesian authority.
  • Lotteries, sweepstakes, and prize draws that require payment to enter and are not registered with the relevant ministry.
  • Currency exchange, peer-to-peer crypto trading, and unlicensed money-services businesses.
  • Investment, "high-yield" trading schemes, and any model that promises a guaranteed return on customer funds.
  • Multi-level marketing structures, financial pyramids, and matrix or "gifting" schemes.
  • Political fundraising, content created to influence an election, and donations to unregistered political organisations.
  • Charitable collection by entities that are not registered as a Yayasan or otherwise authorised to raise public funds.
  • Adult content, escort and companionship services, and any service that monetises explicit material.
  • Content that promotes violence, terrorism, extremism, hate speech, or discrimination on the basis of religion, ethnicity, or gender.
  • Esoteric services sold as remote consultations — magic, fortune-telling, energy healing, and similar.
  • Medical consultations that result in a diagnosis or a prescription being issued online without an in-person follow-up and without the operator holding the relevant SIP licence.
  • Sale of pharmaceuticals, dietary supplements, traditional medicines, or vitamins without BPOM registration evidenced on the product page.
  • Sale of exotic or protected animals, animal parts, and any product that violates CITES.
  • Firearms, ammunition, knives marketed as weapons, and any product that requires a Polri permit to own.
  • Alcohol, tobacco, vape liquids, and nicotine products sold without the licences required under Indonesian customs and excise rules.
  • Narcotics, psychotropic substances, and "designer" or precursor chemicals.
  • Forgery services: document forgery, fake diplomas, fake invoices, identity-document production.
  • File-sharing, "premium-account" resale, IPTV piracy, and the resale of cracked or unlicensed software.
  • Software for SIM-spoofing, caller-ID spoofing, SMS-flooding, or other tools used to commit fraud.
  • Sale of bank account data, card data, identity-document data, or scraped personal data.
  • Odometer rollback services and vehicle-history falsification.
  • Game cheats, account boosting, and the sale of accounts to games or social-media platforms.
  • Counterfeit goods, replicas of branded products, and unauthorised resale of branded inventory.
  • Outbound call services, telemarketing, and "prize-winner" call campaigns.
  • Loan-matching aggregators that route customers to lenders without an OJK lending licence.
  • Sub-aggregator models — collecting payments on behalf of third-party merchants that are not themselves onboarded as UnitPay projects.

This list is not exhaustive. UnitPay reserves the right to decline a project at its discretion when the business model conflicts with our acquiring agreements, our anti-money-laundering programme under UU TPPU (Law No. 8/2010), or the payment-system rules issued by Bank Indonesia.

Project statuses you will see in the cabinet

StatusWhat it means
ActiveThe project has passed final moderation. Live payments and payouts are enabled.
Under revisionA first review was completed but non-critical fixes are required. Apply the fixes within 14 calendar days and resubmit through the Notifications tab.
Re-checkingA revised project has been resubmitted and is being looked at again. The follow-up review is completed within 72 hours.
ArchivedThe 14-day revision window expired or the merchant asked us to pause the project. Payment processing is disabled. Email support@unitglobalsystem.com to reopen.
BlockedThe risk or compliance team has declined the project. The decision is final unless new information materially changes the assessment.

Next steps

  • Create a payment via API — once the project is Active, charge your first customer through the server-to-server API.
  • Callback handler — wire up the server endpoint that UnitPay calls when a payment changes state.
  • If you are not sure whether your business model fits inside the categories above, write to compliance@unitglobalsystem.com before you sign the contract — pre-screening is faster than re-doing onboarding.