"is effectively random"

Yes, in this instance, the pseudo random number is effectively random provided the algorithm provides all possibilities. It has to be less the obvious numbers as already discussed. A typical bank will produce at least 10,000 cards each day so provided each cycle starts at a random point and they are allocated in the order requested the result is genuinely random.