> In many jurisdictions the law allows to store and process PII no longer than needed. 1. I think this is a misunderstanding of the GDPR. You are allowed to ke

> In many jurisdictions the law allows to store and process PII no longer than needed. 1. I think this is a misunderstanding of the GDPR. You are allowed to keep and process PII, as long as you have a justification. Keeping the user‘s purchases around would be such a justification, as would be consent. 2. Even if you were right, they could still keep your account and games around, and just delete the billing info.