[Game] Add query params and populate methods
[Game] Protect user fields