Are companies allowed to manually opt users into adds, despite users previously refusing targeted emails and advertisements?

Hi

I've been customer at a certain payment platform since 2011 and have in the past 15 years not received a single email with advertisement, because I opted out when I created the account.

In the past two days, I've received to targeted emails from the provider. I contacted their support in case this was an error. Support basically told me to either manually set my marketing settings all over or to forward them a photo ID!!

I signed in and saw I was suddenly signed up for marketing emails and newsletters.

1) Are they allowed to change my settings?

2) Are they allowed to demand photo ID?