I think that it is a really bad practice, giving an ID card to a company that you nearly know nothing of is too dangerous for me, they can sell your datas or even create a fake id, all that for you to gain a few bucks is totally not worth it. The worst situation is when a bounty only tell people at the end of the campaign that it is required to do a KYC to get your tokens...