If an ICO decided to ask me for KYC information after the bounty was over, I would look at it as a scam, and as a coin that has no future.
The reason why I would look at it as a scam is because if scammers wanted to get your information, they know that most people are not going to send them their personal information and join their bounty campaign. But when they pull that shit after the fact, a good amount of those people will be vulnerable because they spent all that time working for the bounty, and will sent them the information during such a weak moment, situation.