I got an update on this from a good friend at a bank.
They do this to process payment transactions with the banks, the storage of such data is not under compliance with VISA or MASTER standards. In the Qatar, all outlets have to be compliant by 2012. Right now it is a free for all who want to meddle with somebody else's identity.