Test environment — no real purchase. Use only BML-issued UAT test cards. These test payments do not activate real memberships, grant gym access, supply goods or send customer messages. Live BML payments await bank approval.

Payment privacy and security

Hammer’s existing privacy notice explains account information, transactions, technical records, purposes, retention, access and privacy requests.

This public test checkout uses a synthetic test account and a session cookie. You do not need to provide your real name, phone number, membership or other personal details. We record the test selection, MVR amount, tax calculation, order reference, bank transaction binding, authenticated bank state and test fulfillment evidence for integration review and recovery.

Payment card details are transmitted directly to BML’s hosted UAT payment page over HTTPS. Hammer does not collect or retain card numbers, expiry dates or card security codes. Server credentials remain encrypted in private storage and are never supplied to your browser. Signed bank notifications are checked against an authenticated server-to-server lookup before approval.

Test financial records are isolated from real member data. Access to operational evidence is restricted to authorised staff and management. Contact muaz@thehammer.mv for questions or requests; never send passwords, card data or bank keys.