The Europol press releases says the arrested developer and employee were in Australia and Belgium, so it's probably law of those countries that's most relevant. The website had Australian phone numbers.
https://www.europol.europa.eu/newsroom/news/international-cr...