You can see why their model is working. Almost everyone in the game sports some kind of cosmetic effect.

Of course, I’d be remiss to point out that you really need to shell out to get enough stash space to prevent frustration. One of the $60 supporter packs will get you just enough points and also give an alternate look if you need it. But for the same amount of money as a retail game you get a lot of content.

The game could just read the files on your computer or report your internet browsing. Games have all sorts of access to peoples machines. Game privacy policies often contain some invasive permissions, check them out sometime

You would be amazed by the amount of data "anti-cheat" spyware called BattleEye amasses about customers of their clients.

Game interaction creates lots and lots of data. I don't know how you'd monetize that data (selling doesn't magically monetize, the buyer still has to figure out how to profit)---but that might just be a limit of my imagination.