To begin with, you should at least ask them on what basis they require you to have confidential information and a copy of your passport. And not general information, but a specific normative document and what is written there for this case. This is especially true for the participants in the ICO generosity campaign, which should not be tested at all by KYC because they do not invest in ICO projects. The US, China and some other countries forbid investing their citizens in ICO projects, because they consider this type of activity very risky. Bounty hunters are not at risk of losing their money, they can only lose their time, but not money. Time loss these states are not interested. Many ICOs have already begun to recognize this practice and require the passage of a KYC test only to investors, and not to participants in the ICO generosity campaign.