However in the EU it should be the opposite - otherwise the site is violating GDPR.

Damn then that’s great for EU users. You can really see how scummy these companies are on how they treat GDPR and non-GDPR countries.