They just do this process to make sure it’s really you who’s verifying and no one els, e.g a relative or kyc account buyer. I’ve went through this process before. Rollbit does make me very sad though.
Did they ask about providing evidence of the source fund and ask to log into them ? Asked to show your browser profile ?
KYC is fine but it is inappropriate to ask you to log into your personal exchange accounts while they are live. I would really like to hear from the team or their representatives regarding this situation.