is a multi-tenant payment-gateway platform built specifically for deposit–withdrawal operators. One shared backend serves many operators, each strictly isolated, and each gets its own portals under its own brand from day one.

Core idea: you bring the bank accounts, we bring the gateway.

It accepts THB deposits via bank transfer and PromptPay QR · bots watch bank statements and auto-match them to open orders · credit the merchant's balance · fire a signed webhook back to the merchant's system · push outbound withdrawals through bots wired to real bank APIs · calculate fees and multi-level agent commissions · and settle those commissions automatically every night.

The system works in layers, from infrastructure down to the end customer. Each layer sees only its own slice of the data.

• Layer 0 · Infrastructure — (us): owns and runs the shared infrastructure for every tenant · maintains the bots · bank connectivity · security · bills the platform.
• Layer 1 · Platform Operator (the gateway brand owner): plugs in corporate bank accounts, launches a branded gateway, sets fees, recruits agents, onboards merchants, sees every transaction — via the Admin Portal.
• Layer 2 · Agent (multi-level): brings merchants in and earns commission on every successful deposit · can recruit sub-agents · sees everyone beneath them — via the Agent Portal.
• Layer 3 · Merchant: a business that wires the API into its own system to take deposits and pay out withdrawals · has its own API key · webhook · sub-accounts — via the Merchant Portal and API.
• End customer (depositor): the merchant's own user who deposits via QR or bank transfer and receives withdrawals — no login, just a live payment page.

1. Create order — the merchant creates a deposit request via API or portal; the system returns a payment URL to hand to the customer.
2. Customer pays — scans a PromptPay QR or transfers into the corporate account the system picks.
3. Bot matches — a bot reads the bank statement and matches the transfer to the open order by amount within seconds.
4. Split the amount — merchant balance up · agent commission accrues · platform fee deducted — accurate to the decimal.
5. Confirm back — a signed webhook fires to the merchant's system · the customer's payment page flips to "success" instantly, no refresh.

• Real-time dashboard — total balance · pending deposits/withdrawals · failed orders · per-account balances · 24h/30-day charts.
• Pending-actions inbox — everything needing a human: manual approvals · unmatched items · KYC · pending settlements.
• Payments & withdraws — every deposit/withdraw across every merchant · filter · approve · retry · move across bots.
• Slips & OCR — attach a slip when auto-match needs help · OCR verifies 4 points (sender bank · destination · amount · time).
• Bank accounts · withdraw bot · settlements (THB/USDT) · manage agents/merchants · kill switch · reports & logs.

• Live commission dashboard — balance · today vs yesterday · hourly accrual chart.
• Merchants overview across your whole line · create merchants · manage API credentials and IP whitelist.
• Manage commission — adjust fees below you (floor = your own rate) · bulk update · history.
• Downline · settlement (THB/USDT) · drill-down reports · sub-accounts & logs.

• Dashboard — balance · today/this-month stats · pending items · average withdraw time.
• Create incoming order — pick QR or transfer · enter amount · get a payment URL.
• Pay out & internal transfer · settlement (THB/USDT) · full statements.
• Per-row webhook status — see if each callback was delivered · resend · download a PDF receipt.
• API integration via an HMAC-signed REST API · rotate keys · query order status · sub-accounts & 2FA.

• Stop reconciling by hand — bots match in seconds; a spreadsheet becomes an auditable system.
• Migrate at your pace — the old system keeps running while you move sites over one at a time.
• Consolidate many brands — every site is one merchant sharing a pool of accounts · each with its own team/rights.
• An audit trail that defends you — every state change, actor and timestamp recorded; fee changes keep before/after with the time.

• Real-time everywhere — deposits/withdrawals/settlements and dashboard KPIs stream over WebSocket.
• Balances never collide — each platform's updates run one at a time through a queue; no double-credit.
• Layered security — 2FA on every login · HMAC-SHA256-signed API with a replay window · per-merchant IP whitelist.
• Sensitive data encrypted — bank credentials and wallet private keys encrypted at rest.
• Per-endpoint permissions — support can review but can't release funds; finance can see reports but can't change fees.
• Auto double-withdraw guard · money to the decimal (4 stored, 2 shown) · point-in-time balance snapshots.
• Reliable webhooks — signed callbacks retry up to 5 times, 60s apart (~5 minutes).
• Strict multi-tenancy — one codebase, many brands, isolated data · Thai + English.