Retaining credit card numbers is problematic in and of itself. Then you're just operating a skimmer.