GDPR allows you to keep data as long as you need it to run your business, which in the case of online game store would be basically forever. The only data that has a time limit is stuff like log files and the like, which you might need to catch cheaters and hackers, but is useless after a few weeks or months.