The kyc is actually done by Bcnex and I believe the team are aware of the fear of users loosing their personal information to unscrupulous third parties. I suggest that you carry out the kyc and hopefully there will be no cause for regret.
KYC is needed for token sale or for trading on exchange? I think they can lost a lot of potential customers with KYC, as most of already trusted and established exchange dont need KYC (Binance, Kucoin etc.)