For me,  i think they need to get the kyc of the users is because they need to know personally the user and for formality of the transactions for this kind of business. Some ico need kyc and some are not but for me  the best thing to do is to have kyc for some instances they need it for transaction of the token to you.