1) Do exactly what they want and try to forget about the fact that you are giving personal data to a company with a history of leaking personal data. This is what most people do.
2) Forget about the BTC and let them keep it.
3) Take them to court, they might pay out instantly to avoid even more negative publicity but don't count on it. If you are American taking them to court might not be too hard as Japan has been an American occupied territory with a semi-autonomous government since WWII.