Profile data is read from /api/v2/auth/player-me. The backend doesn't expose a profile-update endpoint yet — fields are read-only here.