To add, the retailers are not allowed to store any card details, like number, dates etc now. They are required to send all these to bank first time, and they get a token only. Next time of a recurring transaction, they simply send this token to bank to charge money.

Customer can see these tokens anytime, along with merchant details, and customer can revoke these tokens anytime.