Storing genetic data is not against GDPR. It matters where they store it and who else has access to the data.
FTDNA should either offer the BAM file for free on request, or offer the same information in a standard format - such as a fasta file with the reads, or a reference-compressed BAM file - so that the user should be able to reconstruct it on their own, or with a competing service (this is actually a service YSEQ offers). They currently don't do this, which means they're withholding PII.