Even if everything looks legit it doesn't mean that it is. Spammers can modify the emails they generate to mask the sender to whatever email they want.
i.e. it says it's being sent from noreply@us.playonline.com but it's not.
Game companies have your information on database it doesn't make sense that they would ever ask you for your username and password.
