Credit cards don't validate age. I set my kids up with authorized user cards when they started going out with friends.
Remember the site guidelines:
SG> Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize.
The obvious solution is instead of "every transaction comes with the user's birthday", the vendor can in some way set a minimum age enum of say (13, 15, 18, 21, 25) — a handful of ages that are significant with respect to some law or regulation. Then the transaction succeeds or fails.