Travel agencies use tokenization services and payment gateways to transmit credit card data and remain PCI DSS compliant.