This answer is completely grounded in fact, so I vouched for it. Even without the bank card number itself, many places used tokenized versions of the card number for tracking purposes.