payment processing law