Payment gateways employ encryption, SSL, tokenization, and compliance with the Payment Card Industry Data Security Standard (PCI DSS).