It would not be legally binding, but if they broke that pledge, it would put a huge dent in their reputation and they will lose a lot of users and a lot of business. I know a lot of people left them already, because they force down strict regulations on the ToS with AML and KYC regulations.

It is also rumored that they are passing on user information to the governments, which is obvious when you have to adhere to these regulations. ^hmmmmm^