Having dealt with GDPR procedures at work this is entirely correct. When there's an actual contract in place (such as with a landlord or a business needing it for shipping/billing) it is legitimate use of data and users won't have to explicitly consent. I guess it might be a bit muddy for users that subscribed to MMO-C premium, but Curse/Fandom is doing exactly what they need to do in the EU for everyone else.