You should take reasonable precautions and use reputable payment systems to store credit card information. If you are required to comply with the Privacy Act 1988 (Cth) you will have obligations under Australian Privacy Principle 11 in relation to the protection of personal information.