Anyone can go to one of the following URLs:
and input anyone's email address there "to receive occasional email from VRChat about events and updates". The process is single opt-in.
It's impossible to determine from a single opt-in if the recipient truly wants to be added to a marketing list without verifying this is the case.