Steam's privacy policy was updated on June 3, 2026 to add Malay language support (marked as BETA) to the policy's language selector. The policy's substantive privacy commitments and compliance statements remain unchanged. This is a formatting and localization adjustment with no operational impact on data governance, privacy rights, or user obligations.
This change does not materially affect the terms consumers operate under. Steam's privacy policy substantive commitments regarding data protection, compliance with CCPA, GDPR, and UK GDPR remain unchanged. The update adds Malay language support to the policy interface, enabling broader accessibility to the existing policy text.
This change improves accessibility of Steam's privacy policy to Malay-speaking users by adding language localization to the policy interface. No substantive privacy rights, data handling practices, or regulatory compliance obligations were modified.
Malay language option (marked BETA) added to privacy policy interface.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
No compliance action required. This is a localization update adding Malay language support to Steam's privacy policy interface. The substantive privacy commitments, data processing disclosures, and regulatory compliance statements (CCPA, GDPR, UK GDPR) remain unchanged. No new obligations are created.
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Monitor: regulatory citations + obligations. Compliance: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002634.
This addition explicitly clarifies data sharing practices with game developers and publishers, specifying the purposes and scope of third-party data transfers.
This addition emphasizes user rights related to data access, correction, deletion, and objection, strengthening transparency around individual data control mechanisms.
This addition establishes explicit consent and opt-out requirements for marketing communications, demonstrating improved compliance with consent-based marketing regulations.
This addition provides specific data retention guidelines and criteria, demonstrating commitment to data minimization and compliance with retention limits mandated by privacy regulations.
The removal of explicit legal bases for data processing reduces transparency about GDPR-compliant justifications for personal data collection and may indicate reduced emphasis on lawful basis documentation.
The removal of this provision eliminates explicit disclosure of behavioral profiling and personalization practices, reducing visibility into algorithmic targeting used for content recommendations.
The removal of this framework provision reduces the structured overview of how data processing policies interconnect with user rights and control mechanisms.
The removal of provisions addressing minors' data protection and age restrictions eliminates specific safeguards for children's data, which is a high-severity omission under privacy regulations like COPPA and GDPR.
The removal of this general third-party sharing provision is replaced by more specific provisions, indicating a reorganization toward clearer disclosure of data sharing practices.
Severity downgraded from medium to low, indicating reduced priority classification for DPF compliance disclosure.
Provision renamed from "Tracking Data, Cookies, and Behavioral Data Collection" to "Cookie and Behavioral Tracking" with severity reduced from high to medium.
Provision renamed from "Game Statistics and Content-Related Data Collection" to "Game Statistics and Device Data Collection" with no severity change.
Provision renamed from "Transaction and Payment Data Collection" to "Transaction and Payment Data Processing" with no severity change.
Provision renamed from "Anonymous Data Sharing Without Retention Limit" to "Anonymous and Aggregated Data Sharing Without Restriction" with no content or severity change.
Cross-platform context
See how other platforms handle similar provisions across the ConductAtlas archive.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — MonitorSteam added Bahasa Melayu (Malay) with a BETA designation to its language selection options in the Steam Subscriber Agreement. The …
Steam modified a single URL in its Privacy Policy on April 22, 2026. The change removes '/en' from the help …
Steam added disclosure and expiration rules for Japanese subscribers' wallet funds. Starting April 21, 2026, any money added to a …
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and lia…
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.