I think that this is normal, it is the duty of every casino, if a person deposits and wins, it is their right to withdraw, and yes, there should not be a KYC requirement to do so, because it would condition them or force them to give their data in order to opt for the benefit, I do not agree with the KYC to withdraw,
Nobody agreed to giving out their private information to casinos but since we're dealing with money here casino are obligated to asked for KYC verification. All casinos are now doing it and if this continue they'll be forcing us to abandon them and move to web3 casinos.
The user automatically agree the moment they sign up on the casino since reading ang agreeing on the casino ToS is part of the registration process before anyone can play in the casino. User that complained about KYC usually don’t read the ToS especially the AML policy section that clearly stated that casino will have the right to ask for KYC.
Decentralized casino is indeed the solution for KYC but the trust issue problem on casino without license will become the main concern.