There are many case of stolen credit cards being used to buy bitcoin so you should also consider having KYC policy for CC buyers.
The above risk exist even if you get kyc from customers, because you don't have enough time to verify those details before sending bitcoins.
Users will first have to verify their account, once they are verifiied they could use the cc, not before.