it seems like your know your customer (KYC) seems to be a very sensitive self-data so it's very dangerous if you submit your data to KYC providers or at most KYCs are ICO and bounty. if it's just for bounty you need to use KYC it seems like it would be terrible.
It is not all about Bounty only. When you share your data, threat can attack you anytime.
Totally, i dont agree KYC applied for Bounty (Because Bounty only Promoting the project and get paid), but for Fight Against AML, we dont haveany chance. Maybe, we can put some rules, after 3 Months, user data removed.