ashu borkar
But plz suggest me
If you want to handle sensitive user data by yourself, you at least should use a secure https connection between server and user, filter PAN from logs, and store it as encrypted data. You may check the way how it implemented for passwords.