"delta" field represents delta of view time between sync-ups in milliseconds. In other words, each time your PPV handler receives sync request, it gets session duration delta from the last sync-up.
So, to get total view time, you need to sum all corresponding deltas. That means, you have to keep total view time for each user in your PPV handler and increment it with each incoming sync-up.
Regarding the DenyList, yes, you can issue that response in order to break specific user's session. Don't forget to reset that user's total view time at the moment of disconnection, so when the user reconnect to stream, he or she won't be dropped again.