That is simply not true. Legally? Maybe you do not need a checkbox. But if you look at the ToS of your payment gateway, to fight charge backs you do. There is no difference from a GDPR perspective in having a ToS checkbox and a gift wrapped check box. They are two totally separate entities and GDPR does not cover a sale terms checkbox, it only covers DATA.