Not to be that guy, but do you have anything to back that claim up? I'd love to know if it's actually true or not; it seems like GDPR is often used as a catch-all magic wand for "I want my data therefore the company has to give it to me", but I'd love to know if it actually applies in the case of a terminated/suspended account and/or an account found to be in violation of the service's terms & conditions.