They did not ask for consent to set up a payments profile during age verification.

Though what you're describing would also be illegal. GDPR does not allow requesting consent for such broad data processing just to fulfill a legal requirement to verify the user's age, and then denying access to the service if the user understandably refuses to give consent.