Australia and New Zealand are insanely careless with personal data. I was shocked when I was asked to write my credit card details, including cvv, on a piece of paper in a beachside surfboard rental shop
If you reported them, chances are, the business would be shut down.
[0] https://www.rba.gov.au/payments-and-infrastructure/payments-...
In Asia, they quite often take your CC details and enter it into a text field in their own system in case they need to process it later, including the CVV. Sometimes they're writing it down on paper.
They're not entering it into a PCI compliant system where the digits are masked.
I've not had this done to me in Australia since late 90s early 00s. These days all it takes is a simple tap (or chip swipe) to put a temporary Hold[0] that's released on check-out (or next day).
Pine Gap is the world’s largest network tap, after all, invalidating the human rights of close to 2 billion people, every single second of the day.
The nation was bred to be so compliant. Australians are not afraid of licking boots if it means cheap avocados can be smashed.
I used a freshly generated virtual credit card with payment amount +20$ as a limit (just to be sure).
I swear half my job these days is helping australian businesses retroactively purge themselves of plaintext card data.
I have seen some shit man.