I think that KYC is all reason not to give you your coins earned honestly. I had experience with the company moneytoken, I participated in the bounty I credited coins in my personal account. I passed KYC documents accepted and approved positively. After some time, the company decided to take away from the personal cabinet. accusing me that I have a multi-account. I provided them with evidence that there was not any deception on my part and that I was doing the work in good faith. now the command is silent does not respond to my requests. I consider it a theft passing verification is useless.
I am not sure if there is anything you can do. You are playing by their rules now. Always double check if KYC is actually required or will be required in the future. I myself don't have some huge trust in bounty campaigns enough to provide them with my personal documents. From what you wrote above I can conlude that everything is in their power. I am not sure the laws of your country if you may have the right to sue them but then you should look at the cost and time and fiqure out if it is worth it at the end of the day.