I have pasted the full text of the response below without further editorial.
Dear Mr. Sands,
We have received your email of August 9th. Our apologies on a delayed correspondence prior to your posting on the internet, but we wanted to have complete and accurate answers to all of your questions before responding. Here are clarifications to your inquiries and we hope that you will pass this along to your readers.
EA does not receive credit card information from Microsoft when an EA Account is created or products are purchased through the Xbox Live Arcade. In order to establish an Xbox account, Microsoft does provide EA email, postal address, age and gender. (We don't actually receive your true date of birth from Microsoft – only your age which our system approximates to a date.) We do not, however, receive phone number, mobile number or credit card information, etc. from Microsoft.
EA maintains all customer information using appropriate safeguards to ensure the security, integrity, accuracy and privacy of the information provided. Personal information is never provided to any third-party without the accountholder's consent. Should we receive consent, the information provided may be shared with one of our promotional partners but we do not maintain a list simply for the purpose of sale to any party who requests it. We are very selective and sharing information to key licensors and service providers. Customer's can always opt-out of sharing their personal information with third parties and may modify this information at any time either by accessing their "My Account" page or by sending an email to privacy_policy.ea.com.
We believe this confusion was caused by an unintentional association of our discussion terms specific to Xbox in close proximity to those that apply more generally. The section you identified in your message, http://www.ea.com/global/legal/priva..., is titled "What is personal information and when does EA collect it?" and was written to address all forms of information EA collects in all possible circumstances. Not all forms of information collection are combined and most operate through completely unrelated and non-interacting operating systems. As an editor, I'm sure that you can understand how this confusion could occur. Please be assured that we will take steps to clarify these points with a future update and thank you for bringing this to our attention.