he’s using google chrome
That answers how it happens. My guess is that he googled things relating to submarines or his browsing behavior regarding that game caused him to be grouped as potentially interested in submarines. If you are using chrome everything you do will be collected and used for marketing. No amount of extensions will save that since the browser itself is spying. If you want to minimize this happening you have to switch browser (brave is the closest to chrome) and stop using google for search.
You wouldn’t concern yourself with the legality, if your threat vector includes the traceability of the phone number.
And regarding your (in this context) nonsensical privilege remark: I live in such a country. Yet I have used such numbers.