Take Two mention changes to EULAs and handling of personal data as a potential source of significant financial risk in their business model. They acknowledge that the handling of user data could significantly effect sales and therefore revenue, an effect they experience much more significantly than many other companies due to a "disproportionately higher amount of attention", which I think is a valid observation.
The document combines observations of data handling and data theft within the same paragraph, so I'll quote what I consider to be relevant:
and later on:
the entire document can be found here, and the quotes are taken from page 18, section starting page 11.
While we can't take anything for certainty from this, we can assume that TT consider induvidual and corporate concern over their data use to be a significant risk in their business model, which is very interesting - they do not need to incur this risk, because the collection of these types of data is not necessary for the functions of their products. It is instead a factor they are willing to include despite an acknowledged risk of losses, which leads me to believe they may in some way be profiting or planning to profit off the collection of this data in some way, be it in house marketing gains or the sale of data to third parties, the latter of which is of course more concerning.
(I know these statements cover only the violation of the EULAs and law, but they are important to include only because the existence of these policies provide TT the ability to complete actions that are legally ambiguous)