Let buyers pay you online with DuitNow QR, Touch ‘n Go, FPX or card — and let Kedaipal mark the order paid by itself, so you stop checking your bank app and chasing screenshots.
HitPay has no sign-up path for an unregistered seller — every business type they onboard needs an SSM profile. If you sell from home and have never registered, register an Enterprise (sole proprietor) with SSM first; it is the cheapest option and its SSM Business Profile is exactly the document HitPay asks for. (Sabah businesses may use a state Business Licence instead.) Until then, keep taking payment the manual way in Kedaipal — bank transfer and QR still work exactly as before.
Open dashboard.hit-pay.com/register. There is one HitPay dashboard for every country — there is no separate Malaysian site to find. You tell HitPay you are in Malaysia later, when you fill in your business details.
HitPay asks for your name, your business name and type, your industry, and which country you operate in — choose Malaysia. It also asks your rough monthly sales; an honest estimate is fine, it is not a commitment.
HitPay emails you when your account is approved, when a payout lands, and if a payment is disputed. Use an address you check — not one you made up for the sign-up.
HitPay must verify who you are before real money can move — every payment gateway in Malaysia does this. Send everything at once and it goes faster.
Sole proprietor / Enterprise: SSM Business Profile.
Sdn Bhd: SSM Company Profile. LLP: LLP Profile from SSM.
If your name does not appear on that document, HitPay also wants a signed letter of authorisation from a director or the company secretary.
You upload your IC, and then HitPay asks you to take a selfie so it can match your face to the IC. This usually comes after you add your bank account, so do not be surprised when it appears late in the process.
This is where your money lands, so get it right the first time.
Sole proprietor: a personal account in the owner’s own name.
Sdn Bhd or LLP: the company’s account — a personal account will be rejected.
Approval takes a few business days. Nothing in your Kedaipal store changes while you wait: orders, WhatsApp confirmations and manual bank/QR payment all keep working. Do the rest of this guide once HitPay tells you the account is approved.
Once your business is verified, DuitNow is enabled automatically for Malaysian merchants — there is nothing for you to do. That is the one most of your buyers will use. The rest below are opt-in.
In the HitPay dashboard, look down the left sidebar to the OTHERS group and click Payment Methods. Switch on what you want to accept — FPX (online banking) and cards are the two worth adding beside DuitNow. Touch ‘n Go, GrabPay and ShopeePay are there too.
Switching one on is not always instant — some methods need the payment provider to approve you first, which can take a few days. DuitNow is not affected by this.
In the sidebar go to Settings → Checkout Customisation. You can pick a light or dark theme and set your brand colour, and choose the order your payment methods appear in. There is no logo upload here — do not go hunting for one.
Still in the left sidebar, under OTHERS, click API Keys. (Some accounts show this inside a Developers section instead, sometimes named API and Salt Keys — it is the same page.)
That page shows two values: API Key and Salt. You need both. The salt is what lets Kedaipal prove a “this order was paid” message really came from HitPay — without it, we could be fooled.
Anyone holding your API key and salt can create payment requests in your name. Never WhatsApp them, never photograph them, never paste them into a group chat. Paste them straight into Kedaipal and nowhere else. If you ever think they leaked, regenerate them in HitPay and paste the new pair into Kedaipal.
In Kedaipal, go to Settings, open the Payments tab, and find the Online payments card.
Kedaipal immediately checks the pair with HitPay. If the key is wrong you are told straight away rather than finding out when a buyer tries to pay. When it works, the card shows Connected and lists the payment methods your HitPay account has switched on — that list is read from HitPay, so it is the truth, not a guess.
From now on, unpaid order pages show a Pay now button. When a buyer pays, the order flips to Payment received by itself and the buyer gets the confirmation on WhatsApp — you touch nothing.
Orders whose price is not final yet — waiting for you to approve a mockup, or to set a delivery charge — have no Pay now button until you settle the price. Nobody should pay a total that is about to change.
HitPay does not support refunds on DuitNow. That is HitPay’s rule, not Kedaipal’s, and DuitNow is the method most likely to be switched on for you. So decide before you start:
Open your storefront on your phone and order the cheapest item you sell. DuitNow has a minimum of RM1.00, so keep the order at RM1 or more. This is a real sale — real money will move.
Open your own order page, tap Pay now, and pay. Then watch the order in Kedaipal: it should flip to Payment received on its own, usually within seconds. That is the whole point of the setup — if it happens, you are live.
In the HitPay sidebar open Transactions, click the payment, and press Refund. If you paid by DuitNow there will be no refund available — see the warning above. Refunds have no extra fee, but HitPay keeps the fee from the original payment, and your HitPay balance must have enough in it for the refund to go through.
Open the order in Kedaipal and cancel it. Refunding in HitPay does not tell Kedaipal anything, so until you cancel, that test keeps counting as real money you collected.
Cancelling puts everything back: the amount drops out of your revenue and Insights, the stock you “sold” returns to the product, and the test stops counting as a real order against your own customer record.
The buyer’s app says “paid” instantly, but HitPay pays you out later: DuitNow and e-wallets in about 2 days; cards and FPX from the next business day. There is a minimum payout of RM5 — a single RM1 test will sit in your HitPay balance until it is joined by more sales. You can choose daily, weekly or monthly payouts under Bank Payouts. None of this is a problem; it just is not the same evening.
Kedaipal takes nothing from your sales. HitPay charges nothing to open the account and nothing monthly — you pay only when a payment succeeds. These are HitPay’s published Malaysian rates for online payments as of August 2026:
So a RM50 DuitNow order costs you about 60 sen. HitPay adds a small extra percentage if you also use their tools (payment links, invoicing, their online store) — that does not apply to orders placed through Kedaipal.
These are HitPay’s numbers, not ours, and HitPay can change them. The live rate card is at hitpayapp.com/my/pricing, and your own dashboard always shows what you are actually charged. If you are printing this guide, treat the list above as a guide, not a quote.
Does Kedaipal take a cut of my sales?
No. Nothing. The money goes from your buyer to your own HitPay account to your own bank. The only fee is HitPay’s, listed above.
Does HitPay hold my money?
Only until the payout runs — about 2 days for DuitNow and e-wallets, from the next business day for cards and FPX. It then goes to the bank account you registered. Minimum payout is RM5.
Can my buyers still pay by normal bank transfer?
Yes, and nothing changes for them. Your bank details and QR stay in Kedaipal, and the order page keeps a “paid by bank transfer instead” option. Switching HitPay on adds a way to pay; it removes nothing.
A buyer wants a refund — where do I do it?
In HitPay: Transactions → click the payment → Refund. Kedaipal shows the payment reference on both your order page and the buyer’s, so quote it to find the payment fast. There is no extra fee to refund, but the fee from the original payment is not returned, and your HitPay balance needs enough in it.
This is HitPay’s own rule and it applies to the method most of your buyers will use. If you need to give a DuitNow buyer their money back, you have to send it yourself — a normal transfer from your bank to theirs. Then fix the order in Kedaipal (below) so your figures still add up.
A refund never reaches Kedaipal — the order stays marked Payment received, keeps counting in your revenue and Insights, and the buyer’s page still shows it as paid. Update it yourself: cancel the order if the whole sale is off (that also returns the stock and takes it out of your figures), or leave a note if you only refunded part of it.
Do I really need SSM registration?
Yes. HitPay verifies every business and every route needs an SSM profile — a Business Profile if you are a sole proprietor, a Company Profile for a Sdn Bhd. (Sabah businesses may be able to use a state Business Licence.) If you are not registered, registering an Enterprise is the cheapest way in.
What happens if I change my HitPay password?
Nothing — the API key and salt are separate from your login. Only if you regenerate the keys in HitPay do you need to paste the new pair into Kedaipal (use Replace keys on the card).
Can I try it without real money first?
Only partly, and it is usually not worth it. HitPay’s test environment is a completely separate account at dashboard.sandbox.hit-pay.com with its own keys — and neither DuitNow nor FPX exists there, so you cannot test the two methods that matter most to a Malaysian shop. The small real test in Step F tells you more.
Tick these off and you’re live:
Account approval, payouts, refunds, fees → HitPay support (the chat bubble in their dashboard, or support@hit-pay.com).
Keys rejected, Pay now not showing, order not confirming → message us on WhatsApp — we’ll check it with you.