Keep user.pool & game.cardreward encoded. Next: accountbound. Then touchup server
Don't decode accountbound