That is not enough, and goes agaisnt EU laws, the game might beunavaible because it is getting extremely intrusive for monetary purpose without any consent or supervision/knowledge from the users.
You can’t really get online until they do respond and fix their “hors la loi” behavior.
People should get responded instantly and get their rights covered, this is basic stuffs.
Heres a few parts of such laws:
"EU data protection rules, also known as the EU General Data Protection Regulation (or GDPR), describe different situations where a company or an organisation is allowed to collect or reuse your personal information:
they have a contract with you – for example, a contract to supply goods or services (i.e. when you buy something online), or an employee contract
they are complying with a legal obligation – for example, when processing your data is a legal requirement, for example when your employer gives information on your monthly salary to the social security authority, so that you have social security cover
when data processing is in your vital interests – for example, when this might protect your life
to complete a public task – mostly relating to the tasks of public administrations such as schools, hospitals, and municipalities
when there are legitimate interests – for example, if your bank uses your personal data to check whether you'd be eligible for a savings account with a higher interest rate
In all other situations, the company or organisation must ask for your agreement (known as “consent”) before they can collect or reuse your personal data.·
" When a company or organisation asks for your consent, you have to make a clear action agreeing to this, for example by signing a consent form or selecting yes from a clear yes/no option on a webpage.
It is not enough to simply opt out, for example by checking a box saying you don’t want to receive marketing emails. You have to opt in and agree to your personal data being stored and/or re-used for this purpose.
You should also be given the following information before you decide to opt in:
- information about the company/ organisation that will process your data, including their contact details, and the contact details of the Data Protection Officer (DPO) if there is one
- the reason why the company /organisation will use your personal data
- how long they intend to keep your personal data
- details of any other company or organisation that will receive your personal data
- information on your data protection rights (access, correction, deletion, complaint, withdrawal of consent)
All this information should be presented in a clear and understandable way."
And I forgot, the worse, There is kids playing this game… Kids are being completely spied and their rights getting destroyed the same, it makes everything even worse.
" f your children want to use online services, such as social media, downloading music or games, they will often need approval from you, as their parent or legal guardian, as these services use the child’s personal data. Your child will no longer need parental consent"
You literally need parents consent.
"
.
I can see the monitor activity being a concern for many users so heads up on that. 
I personally know Meta already uses eye tracking and tracking info but VRC is not as big as Meta and it might feel a bit more personal and intrusive.
Many users do not seem happy with the 50/50 subscription pay out and I agree it does seem a bit steep. But I can only assume this will be temporary until things fully roll out and we all get a better feel for how this is going to work out in the long run.
As before I would like to suggest “Pay at the door” A one time payment for things you want in VRC but do not wish to subscribe to. Maybe you guys already have plans for that and im just not aware, But I feel like it would be something users might want.
