all they could do is rack-up more points for you. The data is kept in a database, not on the card. The card just has an account id on it that's of no value to anyone but the casino. To redeem your points in your account, you'd have to show a picture id.