Here it’s apparently done just through a credit card. Does this meet the standards for the German law […]

it seems not. Providing anonymous verification data like Credit card information or even just the id number of the personal identification card is not enough, the provider has to verify the actual identity of the person. I guess that’s quite a bigger hurdle to overcome, so probably fair for valve to not bother.