Card details never sit in plain text
Card numbers are tokenised before they reach storage. That means the live number is replaced with a masked token, so exposed records stay useless on their own.
The kk99 App treats that token like a reference tag, not a wallet. It is enough for checks, not enough for misuse.
