A friend plays some facebook games and purchases some virtual goods from within the game for past few years.
He enquired with the company about the total purchases he had made till day in email and received following reply:
"We are unable to disclose this information due to our Privacy Policy. If you would like more information regarding your purchases, please contact Facebook for further assistance"
Prior to facebook he purchased directly with gaming company, they had gateway setup to charge customers via there direct credit cards/paypal.
For first time I heard an online store refuses to give details about the purchases made by a customer, sounds very fishy,