Last year I had my c card hacked and I only use it on Agoda..part of the same ownership as Booking.com I discovered under Agodas settings it says remember CC details for next time...now deleted... I'm convinced someone at Agoda passed my details on to a third party...I lost nothing as my Bank stopped payment 😔