Not actually me buy almost for rest of the world it worths 25$, yeah, I mean blockchain.info
2. It was already answered by user above me. It's prohibited to sell your customers' info to someone but it doesn't except that someone from staff/it worker may sell it. If they are sold, that's all, you can do nothing but at the same time you have no other choise but to use services with KYC and that's normal if our informations are really secured.
Also for a lot of people their ID card is nothing but some random shit written on card, they don't care about it, a lot of people send KYC documents to scam casinos with hope of free no deposit bonus but in overall, these kind of people are meaningless, so is information about them.