The extensive use of the internet by children has given rise to concerns about their digital privacy. The General Data Protection Regulation ('EU GDPR 2018') treats children as a 'special class of data subjects' without clearly explaining how to do so in practice. Privacy policies set out a website's data handling practices, however, they are typically complex, lengthy documents that deter users from reading them. A comparative analysis examining the adequacy of data privacy laws in the EU, the U.S. and Canada in protecting children's digital privacy is carried out, followed by a multiple-case study evaluation of popular videogame policies. As a result, an original child-friendly model privacy policy was drafted, designed to inform the development of best practice in treating children as a special class of data subjects.