We do not request KYC from all, only suspicious ones.
How does that make the situation any better? And why did you initially state that KYC is not necessary for smaller withdrawal amounts? Unless, of course, you consider $200 to be a "large sum," or perhaps you view depositing, playing, and trying to withdraw winnings from a casino as suspicious behavior?
If the system issues an alert that a suspicious action has been noticed, then we ask for a withdrawal, the player of which has nothing detected, the withdrawal occurs without KYC confirmation.
For example: the game is prohibited on the site, and the person enters through the link and continues to play, or the system notices and sends us data about the suspicion.