Many exchanges are the same and can request KYC, such as ChangeNow, ChangeHero, StealthEX and Changelly.
We all have the same system, and we have our own as well.
All these exchanges are not exactly the best role models. How is it not exch.cx exchange that is your role model?
Or, for example, Zeusmex's method
For example, when an exchange request is created, a unique address is generated for this request, to which the client must make the payment. The client transfers, for instance, BTC to this address. After the required number of confirmations, an AML check takes place. If the funds pass the AML check, the exchange continues; if they do not pass, a refund form appears on the exchange page, where you need to specify the address to which you want your BTC returned and click the "submit" button. After this, your bitcoins will be returned instantly from the same unique funding address to which you made the payment for the exchange request.
Based on @xtests' experience, you don't have much influence, as a re-seller, on the AML check and eventual confiscation of funds, so maybe that explains why you stick to these conditions.