First of all, it isn't a law. It was created by the card companies, not the government.
Secondly, I seriously doubt the CC payment process deals with an .exe file, for various blatantly obvious reasons. Think about it, it isn't that difficult.
Lastly, CC information is not stored and/or processed client side, thus the reason your card is stored on battle.net - and why the Blizzard store forces you to use payment on file - in fact this is why they remain PCI compliant.
Source: I dealt with PCI compliance quite often for almost 2 years when I was working IT for a private healthcare provider, and compliance became an issue.
Well... As I said in the prior post, you know it all's are a joke! I don't care where you work or have worked. I am not a PCI compliance consultant such as yourself. But the ignorance the comes from you makes me sick. I am so sorry Mr. Know It All.... I should have been more technical and posted all the information regarding PCI compliance, all 4000+ pages(what joke!). I'm not wasting time with you. But I will shut your mouth for the sake of you trolls making shit up to confuse people and troll, PCI compliance isn't all about credit card numbers, here is a simple example, out of thousands, * Any merchant that has suffered a hack that resulted in an account data compromise may be escalated to a higher validation level. This is from the Visa web site...(with your extensive knowledge and experience Mr. IT you would know this). About the law... "Is PCI compliance a law? The short answer is no. The long answer is that while it is not currently a federal law, there are state laws that are already in effect (and some that may go into effect) to force components of the PCI Data Security Standard (PCI DSS) into law. In addition, there is a big push by legislatures and industry trade association to enact a federal law around data security and breach notification." I am so sorry for not explaining myself about the PCI compliance law. Give me a break and stop wasting everyone's time. NEXT... PS... GET A JOB!