DPO Group Review

Regional Breakdown

Africa is the only region where DPO is the right answer for most use cases. Kenya is the operational heart. DPO has been running M-Pesa integration since the early years and most of the senior engineering team is in Nairobi. Tanzania and Zanzibar are unusually deep for a Pan-African PSP. DPO has dominant share in Zanzibari hotels and was the first PSP acknowledged as licensed by the Bank of Tanzania in 2023. South Africa is the PayGate stronghold. DPO acquired PayGate before the Network International deal and uses it as the SA card gateway with rand settlement. Nigeria is the late-arrival market where DPO is fighting for ground against Flutterwave (which has the CBN Switching & Processing License, a tier DPO doesn't hold) and Paystack (Stripe-owned). Ghana, Uganda, Rwanda and Cameroon use the MTN MoMo rail primarily. Outside Africa, DPO does process some international card volume for tourists paying African hotels and tour operators. That's the Dublin HQ's purpose, but it's not a Western card acquirer in any meaningful sense.

Verticals

DPO markets primarily to Travel & Tourism, Hotels & Hospitality, Airlines, eCommerce, Education, Insurance, and SMB retail. Gaming is not a published vertical: DPO markets nothing to iGaming the way AstroPay and PayNearMe do. The publicly-known client roster is hotel and travel: Serena Hotels (East African hotel group), Sarova Hotels (Kenya), Hemingways Collection (Kenya), Heritage Hotels (Kenya), Air Tanzania, Jambojet (Kenya Airways low-cost subsidiary), Bonfire Adventures (safari operator). No African sportsbook is on the named client list. Some likely use DPO via the standard merchant agreement but it's not a published focus the way Bet9ja-on-Flutterwave is. For African iGaming this is enough to integrate, though a global iGaming track record doesn't exist.

• Travel & Tourism
• Hotels & Hospitality
• Airlines
• eCommerce
• Education
• Insurance
• SMB retail

Deposits are instant on cards, mobile money, PayPal and most alternative methods. DPO markets a 'Real-Time Settlement' product that credits the merchant DPO account instantly when a payment is taken, though settlement to the merchant bank account follows a T+1 cadence for most local-currency flows and T+1 to T+3 for cross-currency settlement. Withdrawal speed for player payouts depends on the destination rail: mobile money payouts are typically instant to T+1, card payouts 1-3 business days, bank transfer T+1 to T+3. The disconnect that shows up most often in negative reviews is between the marketing onboarding speed (24-hour activation after KYC) and the operational reality (1-3 weeks for SMB merchants, longer for high-risk verticals). Refunds reflect in 5-10 business days for cards and instant to T+1 for mobile money. Mobile money rails are push-payment and chargeback-free, which is a structural cash-flow advantage in African markets where mobile money typically accounts for 30-90% of online betting volume depending on country. Rolling reserve, when applied, is held up to 180 days, longer than AstroPay (90 days), similar to Flutterwave (180 days at up to 10%) and Worldpay (long-hold market standard). For comparison, EBANX runs 4% for 180 days, Nuvei runs 5-10% for 6 months. DPO doesn't publish its standard reserve percentage so it varies by merchant risk profile.

Integration Assessment

Two API surfaces. Legacy PayHost SOAP API (PayGate heritage, host-to-host, used by hotel PMS and ticketing systems, the rail behind most of the hotel client base) is documented at docs.paygate.co.za. Modern DPO Pay REST API at docs.dpopay.com is the path for new integrations, JSON over HTTPS with documented endpoints for transactions, refunds, payouts, recurring billing and webhooks. Plugins maintained in the DPO-Group GitHub organization (github.com/DPO-Group) cover WooCommerce, Magento 2, Shopify, OpenCart, PrestaShop, Wix, Gravity Forms, WHMCS, Ecwid, VirtueMart and Odoo, around 16 repos total. PHP SDK on Packagist (dpo/dpo-gateway). Mobile SDKs for Android and iOS plus the DPO Pay Mobile app for in-person and link-based acceptance. PMS connectors cover Cloudbeds, Hotelogix, eZee, Little Hotelier, RoomRaccoon, Nightsbridge and ResRequest. Full sandbox at secure1.sandbox.directpay.online with test card numbers and simulated mobile-money flows. Documentation is functional but uneven. Reviewers consistently call it adequate rather than excellent. Typical technical integration time is 1-2 weeks via plugin, 2-4 weeks via direct API. No prebuilt SoftSwiss, EveryMatrix or Slotegrator connector.

Compliance Context

PCI DSS Level 1 certified, originally attained across 12 African countries including Kenya, Tanzania, Zanzibar, Zambia, Uganda and Rwanda, making DPO the first PSP in Africa to hold Level 1 across multiple territories. GDPR-compliant in every country of operation. SARB authorization for South African card acquiring through the PayGate subsidiary. CBN license in Nigeria (granted 2022). Bank of Tanzania acknowledged DPO Pay as a licensed PSP in 2023. Central Bank of Kenya authorization. Plus country-level PSP authorizations across the 21-country footprint. No gambling-specific licensing. 3D Secure 2 on card-present and CNP transactions. AVS, CVV and BIN-level checks. Built-in rules engine for fraud screening with velocity controls. Stored card tokenization for recurring billing and one-click checkout. No public partnership with Sumsub, Onfido, Jumio, Veriff, Sift or Ravelin disclosed. KYC and fraud appear to be in-house under Network International's compliance umbrella. Up to 180 days rolling reserve where applied to high-risk merchants.

Regulatory Position

PCI DSS Level 1 across multiple African territories (first regional PSP to attain it). GDPR-compliant in every country of operation. Country-level PSP licenses and authorizations: Bank of Tanzania (acknowledged 2023), Central Bank of Kenya, SARB in South Africa via the PayGate subsidiary, CBN Nigeria (2022), Bank of Ghana, Bank of Uganda, National Bank of Rwanda and similar in the rest of the 21-country footprint. No gambling-specific licensing: no MGA, no UKGC, no Curacao B2B supplier license under the LOK regime, no SPA/MF license under Brazil's Law 14.790/2023 framework, no GBGA, no Anjouan license. For operators with an MGA or UKGC remit, DPO can be onboarded as a payment supplier but the regulatory burden for evidencing supplier compliance falls on the operator's compliance team. The Network International parent was FCA-regulated as a listed company (LSE:NETW) until the September 2024 Brookfield take-private, and remains supervised by the Central Bank of the UAE, which adds an institutional credibility layer to the African operating entity.

Review Analysis

Trustpilot 1.6/5 from 57 reviews on dpogroup.com with a polarized distribution: 42% 5-star, 5% 4-star, 5% 3-star, 0% 2-star, 48% 1-star. The 5-star bucket is dominated by long-term hotel and travel merchants, reviewers like Jean Paul Karinganire (Rwanda) thanking DPO for easy guest-payment flows, multi-year customers in Tanzania and Zanzibar praising integration support, and the African travel vertical clients DPO built its business around. The 1-star bucket is consistently structural rather than incidental: documents requested over plain email rather than a secure form, multi-week activation against a promised 24 hours, held funds, slow ticket resolution especially among Nigerian merchants who are the most recent cohort and who are pitched the most aggressively post-CBN-license. Trustpilot itself flags 'Hasn't replied to negative reviews' on the profile, which is the operational signal that matters more than the headline rating. Scamadviser and similar third-party review sites give DPO middling-to-positive trust scores based on domain age and SSL configuration but those scores are domain-quality signals rather than service-quality signals.

Context for Operators

For B2B diligence the Trustpilot pattern is informative because the reviewer base is mostly merchants rather than end users, unlike Adyen (1.3 with 87% 1-star, almost entirely flooded by Vinted/Ticketmaster end-user complaints about frozen accounts). When merchants leave 1-star reviews about onboarding friction and held funds at a 46% rate, that's a structural signal about the operational reality of working with DPO at the SMB tier. Enterprise hotel and travel merchants who got hands-on account management report a different experience entirely. The polarization isn't fake, it reflects two different customer segments. Signals that matter more than the star rating: PCI DSS Level 1 across multiple territories, the 21-country footprint, the dense PMS and Channel Manager connector list, the Network International ownership (now Brookfield-owned PE asset), and the 2022 Nigerian CBN license as a recent regulatory addition. Slow ticket resolution also runs through the 1-star reviews, so the question for vendor calls is who currently owns merchant escalation and what the SLA is.

Client Evidence

60,000+ to 100,000+ merchants depending on the marketing snapshot. The publicly-known client roster is dominated by African hotels, airlines and travel: Serena Hotels, Sarova Hotels, Hemingways Collection, Heritage Hotels, Air Tanzania, Jambojet, Bonfire Adventures, plus a long tail of safari operators, OTAs, restaurants and SMB retail. DPO serves 50+ airlines in its travel vertical. No global iGaming brand is on the published list. This is a hotel-and-travel PSP, not a gambling PSP. Some African sportsbooks likely run DPO for selected rails (especially in Tanzania and Zanzibar) but it's via the standard merchant agreement, not a published vertical. The contrast with AstroPay (500+ merchants, most of them iGaming, with Betano and Novibet named, Premier League shirt sponsorships) or PayNearMe, which names BetMGM, DraftKings, Caesars and FanDuel outright, is sharp.