Whitelist is a list of a reliable investors (or any other reliable people, for example airdrop participants) and KYC is a process when you are confirming your identity with ID or driver license
Also should mention it's not necessary (mostly but can depends on the current situation) to pass KYC for whitelisting, mostly it's enough proving you're not a bot or scammer (for example by Skype call)