Here is a scenario.
You are a small startup company that makes a video game. In your video game, you can exchange money for items. You are not dealing with the credit card/debit card directly but instead outsource it to third party service.
Still, even if you are not dealing with the credit card/debit card directly, your database might contains thousands/millions of dollars in item from the game.
How do you protect that information?
My question is more related to the physical protection of your servers. For example, stopping someone from walking into your server room and tinkering with your data. Is it better to manage those servers yourself or use one of the popular cloud hosting solution? When using a cloud solution, you might wonder if the administrators are playing with your data.
Note : I know that big companies prefer to have their own dedicated servers in their own server room with security guards on watch 24/7 but it is probably not in the budget of that small company.