The only thing that can be done is for the player to start the purchase process. Once the screen where you enter the method of payment appears have them send you the url. Then you can complete the purchase. This in no way compromises her account or your payment information.