Merchant of record
Every transaction on this site is made with Access Transit Express, a company registered in Indonesia. We are the merchant of record: the contract is with us, the charge comes from us, and we are the party responsible for delivering the service and for any refund.
The services themselves are performed in Thailand, by our Bangkok operation. A cross-border structure like this is ordinary for a regional operator, and we would rather state it here than have you discover it from a bank statement.
| Legal entity | Publishes automatically once entered in the site configuration |
|---|---|
| Registered office | Indonesia |
| Operations office | Bangkok, Thailand |
| Services performed in | Thailand |
| Trading domain | accesstransitexpress.com |
| Customer service | support@accesstransitexpress.com |
| Service hours | 24 hours a day, every day |
Our contracting role
All services are performed in Thailand. We sell them either as organiser (principal) — tours, transfers, boat trips, charters and airport fast track — or as the authorised agent of a third-party venue, which covers admission tickets. Every listing states which applies to it, and so does every voucher. The detail is in section 2 of our terms.
In both capacities we are the merchant of record and the party that issues refunds, so a cardholder never has to pursue a Thai supplier directly. This is a single-entity model: there is no marketplace settlement, no split payment to third-party sellers, and no stored-card or recurring billing anywhere on this site.
Currency and billing descriptor
Every price on this site is quoted and charged in Thai baht (THB), because that is the currency our Thai suppliers invoice us in. Where the site shows a price in another currency it is clearly labelled as an indicative conversion; your issuer applies the real rate and may add its own cross-border fee.
Indonesian domestic payment rails — QRIS, virtual accounts and e-wallets — can only move rupiah. If you pay by one of those, the booking is converted to Indonesian rupiah (IDR) and the exact rupiah amount is shown to you before you authorise it. Card payments are presented in Thai baht.
Funds settle to the merchant's account in IDR. That is a back-office matter and it does not change what you are charged.
Your statement will show ACCESSTRANSITEXPRESS. If you see that descriptor and do not recognise it, it is this website — please contact us before disputing.
Accepted payment methods
- Credit or debit card. Visa, Mastercard, JCB, American Express and UnionPay. 3-D Secure applies. Card details are entered on the payment provider’s own page — never on this site.
- QRIS. Scan with any Indonesian banking or e-wallet app — GoPay, OVO, DANA, ShopeePay, LinkAja and every QRIS-enabled bank. Confirmed in seconds. Charged in rupiah.
- Bank transfer / virtual account. A virtual account number for BCA, Mandiri, BNI, BRI, Permata or CIMB. Pay from your banking app; we are notified automatically. Charged in rupiah.
- E-wallet. OVO, DANA, LinkAja or ShopeePay, paid directly from the balance in your app. Charged in rupiah.
- International bank transfer. For bookings over ฿50,000 and agency accounts. Allow one business day for funds to clear.
Card schemes and rails accepted: VISA, Mastercard, JCB, AMEX, UnionPay, QRIS.
Cross-border disclosure. Because the merchant is registered in Indonesia and the service is delivered in Thailand, your issuer may treat the transaction as international and apply a foreign-transaction fee. We neither set nor receive that fee.
PCI DSS and card data
Card data is never entered on, transmitted through, or stored by this website. Payment is completed on a hosted page operated by our PCI DSS Level 1 certified payment service provider. Our own PCI scope is therefore SAQ-A: we outsource all cardholder data functions.
What we hold against a booking is limited to:
- the payment provider's transaction reference;
- the amount, currency and result;
- the card brand and the last four digits, for reconciliation and dispute defence.
We do not hold, and could not produce, a full card number, expiry date or security code. Nobody at this company can retrieve one.
Transport security
- Every page is served over HTTPS with TLS 1.3. There is no unencrypted route to this site.
- HSTS is enabled, so browsers refuse to connect insecurely even if asked to.
- A Content-Security-Policy restricts what may execute on the page.
- Clickjacking protection prevents the checkout being embedded in another site's frame.
- Booking data at rest is encrypted and access-controlled.
Fraud prevention
3-D Secure (Verified by Visa, Mastercard Identity Check, J/Secure, SafeKey) applies to card payments, shifting authentication to your own bank. Alongside it, our provider runs address verification, velocity and geolocation checks.
A booking may be held for manual review if the checks flag it. We will contact you rather than cancel silently, and we may ask for proof of identity where a transaction is high value or the delivery details are inconsistent. If you do not recognise a charge, contact us first — we can usually resolve it the same day, which is faster than a chargeback and does not put your booking at risk.
When you are charged
Nothing is charged when you submit a booking on this site. That request reserves your places and goes to our operations desk. Once availability is confirmed we email a secure payment link, valid for 24 hours. You are charged only when you use that link, and the amount charged is exactly the amount shown on it. There are no recurring charges, no stored-card billing and no subscriptions anywhere on this site.
Receipts and invoices
A receipt is issued automatically on payment, and your voucher shows the amount paid and the payment reference. If you need a full tax invoice — a Thai VAT invoice, or an invoice addressed to a company — email bookings@accesstransitexpress.com with your booking reference and the billing details, and we will issue it within one business day.
Reporting a problem
Suspected fraud, an unrecognised charge or anything else about a payment: disputes@accesstransitexpress.com . We acknowledge within one business day. The full escalation path, including chargeback rights, is in the disputes and chargebacks policy.
If you believe you have found a security vulnerability in this site, please report it privately to support@accesstransitexpress.com before disclosing it publicly. We will acknowledge within two business days.