RegOnline

I hope this is the right place to put this.
My organization used Regonline for a conference.
The sign-in page has a request for email address, confirm email address, and then a request for" password" IMMEDIATELY UNDER THE EMAIL. There is no note about" creating a password". They are getting peoples emails and passwords.
In addition they store peoples' credit card numbers for 90 days. It might be longer, its hard to tell from their site.
Anyone know of Regonline problems?

 

This is what I see in the sign in page:

First Name:
Last Name:
Organization:
Phone:
Email:
Website:

Username:
Create Password:
Confirm Password:

Registrants Per Year:
Account Currency:
How Did You Find Us?
Other:

They don't ask to confirm e-mail address. They simply ask you to enter a username and a password for the account you're creating with them. They also ask you to confirm the password. Not your e-mail account password.

I got this from -https://www.regonline.com

 

Thanks
I get that now too, maybe I wandered into a different registration, IDK. They do keep credit card info for waaaay too long