Personal details of adult virtual reality game SinVR customers were accidentally exposed for two weeks, while security researchers tried to get the company's attention