How would you prove an opt-in, even if you had more info than just the email address? I mean, would a timestamp column suffice? What did they expect to see exactly?
If you import a huge list for spamming they will find out the first time you send out email and block your account.