Absolutely there's a problem. The current wording puts no limits on how the data may be used. If the purpose is solely for fraud detection then it needs to say

Absolutely there's a problem. The current wording puts no limits on how the data may be used. If the purpose is solely for fraud detection then it needs to say that and there needs to be serious penalties for violating it.