> But if he had the security card and CD-ROM of SF3, then legally he could keep a > backup copy of the data for the two for use in MAME. > > I originally meant that it was legal to own a copy of the images
It's only legal if you made the dump yourself from the actual copies you owned. (And then only in the US - AFAIK in Europe even that's not allowed).