this is entirely decided by the software and controller firmware… there is no hard reason this needs to be the case… at least not from a technical standpoint. The facility code and card number are just arbitrary boundaries put around the pure binary data contained on the card and reported by the reader to the controller… on the card it’s all just binary data.