If it's legal, it seems like every business would do this. Your bank, the local McDonalds when you install their app, Uber & Lyft, every e-commerce site would bury in the terms & conditions, etc.
Your bank is absolutely permitted to call you regardless of you being on the DNC. You have an existing business relationship with them.