In general, it is better not to join ICO campaigns that require bounty hunters to undergo a KYC check. However, if the team actually deceived the participants in the ICO generosity campaign and announced such a check after the end of the ICO, in order to make fewer payments to earned tokens, I think that it is possible to respond the same and send other people's data. In addition, you can not be sure that your data will not be published anywhere in the public place or even sold to criminals.
In addition, the requirement to pass a KYC test for participants in the ICO generosity campaigns is generally illegal, as we are not investors. This has already been recognized by some ICO teams and requires the passage of a KYC review only against investors.