From the very start ask your bounty manager if the rules are already firm and final.
But the sad thing is before you are going to ask them, you'll see one rule that allowed them to change any rule as they wish.
Agree, it's the final rule!
But on the other hand, why need KYC for a bounty program? I cannot see the point.
The truth is the crypto space is crazy. To earn good reward in bounty this days is almost impossible because of the market condition not helping most prospective ICO's project are being traded on exchange far below ICO value. So i think there are some hunters who have taken advantage of this to run multiple account and steal other hunter's hard work because they want a large number of tokens. So some project realize this and made it compulsory for hunters to go through KYC even if it was not stated in the bounty rules. So in this case they have succeeded in exposing those with multiple accounts. For a solid project, i think KYC is good.