A method and system may provide a secure credit card payment service which allows a merchant to store credit cards without storing credit card data on merchant servers. The customer, via a web-enabled device, transmits a request to register a credit card and receives from the merchant server, a credit card registration webpage where the customer may provide credit card data and customer data. In response to receiving the credit card data and the customer data, the web-enabled device transmits the credit card data to a token server that stores the credit card data and receives a token from the token server. In response to receiving the token, the web-enabled device transmits the token and the customer data to the merchant server for processing subsequent credit card payment transactions.