Is it acceptable to store card verification values, or PIN and PIN block data?
It is never acceptable for acquirers, merchants, or service providers to retain card verification values, such as CAV2, CVV2, CVC2, or CID numbers, or PIN or PIN block data subsequent to transaction authorization.The Visa & MasterCard Operating Regulations prohibit such storage, whether encrypted or unencrypted.See this FAQ for additional details.