I think ssl certificate is must to protect your clients transaction, you can go for 128/256-bit Encryption which would be cost effective solutions.