More and more bounty campaigns want you to do a KYC and send them all your personal data (id card, driver's license, address, phone number...).
It's a question you have to ask now. Does this ICO require participants to KYC now or in the future?
I have started a few bounties and after a few weeks participation they announce there will be a KYC. It's really disappointing when this happens and there is no recourse. What can you do? You have just helped promote a ICO and without warning they add this big or even insurmountable hurdle if you are from a blacklisted country. If you ask them they will say, "well we did stipulate we can change the rules whenever we want. By participating you tacitly agreed to are terms."