The PCI field can accept any single line text - this includes any UTF-8 character. Thus, any sensitive or confidential information of customers can be stored in this field.