Yes, blocking all of Europe is what I meant. The point is they are collecting the data from Steam, which already has the data legitimately, not from the users directly. One of the two conditions for complying with GDPR according to the comment above was simply blocking Europeans with no other conditions. It sounds like as long as they do that, they can collect and distribute all the data about Europeans they want.