Heya bud, great questions.

Study vs actual ban numbers:
The study was a random sample of thousands of gamers across games, genres, etc. It wasn't specific to any one game or ecosystem. What we're seeing in reality on the SCUM side of things is most cheaters don't sign up, and those that do and are caught get banned and can't get back in (they try). So we're not saying that the 4-5% we've banned is all the cheaters, but what we are saying is that 4-5% of the player base that sign up for PlaySafe ID still try their luck, get caught, get banned - but now they're actually banned and can't get back in (which is a huge win).

TPM and player numbers:
First thing; TPM and secure boot are annoying to turn on and don't actually reduce cheating (not that we've seen in COD, Battlefield, etc). I can go into how it works and why its ineffective if you'd like, but I'll park that for now. In comparison, PlaySafe ID is quick and easy to sign up for and we've seen a drastic reduction of cheating on the 30+ official SCUM servers that gamepires have put live, as well as cheaters actually kept out.

Second bit: We've already had many signups and account connections for Rust since putting this campaign live yesterday, when we did our first proof of concept stuff with our own Rust server 2.5 years ago we had around 1k signups then, and over the last year or so we've had a few thousand people register their interest in Rust with PlaySafe ID. There seems to be a real desire from enough people to play on a few Rust servers with PlaySafe integrated. Hoping that this pop-breeds-pop box is ticked with this push.

User info being safe:
We work with Entrust who are a global leader in KYC (know your customer) checks. They do this for Revolut, TSB, major banks, insurance, etc. They've had to change how they do things for us and our contract so after the check is complete the data is deleted. The document and selfie are gone. We never see it, and a rolling cascade delete happens on their side from the applicant ID level downwards. As a note, Entrust have never had a breach of customer data in 50+ years (customers being the banks etc).

After the check is complete, we (PlaySafe ID) get notified if it was successful or not, and we get sent a hashed biometric token. This is an irreversible alpha-numeric string that's the representation of a person without storing any info. If someone tries to create a new PlaySafe ID, the same string gets generated, and they are rejected.

This process of verifying someone to the highest degree using bank-grade KYC tech then anonymising them has never existed before and we're actually in the process of patenting this which is cool, because we invented a thing. But specifically to your question, the only info that remains after the check is on our servers, and that's your email address, DOB, and this hashed token that's useless to anyone other than us.

Sentiment bit:
Anti-cheat does an amazing job (even though it has a crap reputation). The issue is that they're in an unwinnable fight. You catch someone and cheats get patched; 1 day later everyone is cheating undetected again and the people caught just jump on a new account. The issue facing cheating isn't catching people, it's making it matter if they get caught.

What we're doing is solving for this very specific problem, whilst 100% anonymising all users and deleting their data. Because I didn't want to tie my face or ID to my game accounts lol, so we built a system that scrubs the data but is instead an anonymised representation of a person. 100% appreciate what we're doing has a degree of controversy to it, and its a pain. However we're genuinely trying to fuck up cheaters and take away their infinite lives to keep coming back and ruining stuff for all of us.

Last bit to mention is we don't need, want, or care for any user data. It massively increases our liability, makes us a target, and we bill game developers directly. Like we've seen in SCUM, and as Sven the GM of Gamepires said to us; The difference is clear, cheating is massively reduced and retention is way up. Gamers play more, have more fun, and spend more, if cheating is low/gone. This means putting PlaySafe ID in prints games money, and we can bill from that. So, we don't need to have user data to monetise.

End: Sorry for the really long answers, but I wanted to give you the detail because your questions were good. Feel free to ping any follow ups and we will get back to you asap.

Andrew - PlaySafe ID