Compliance officer (of another institution) here: It's policy not regulation. There is no regulation forcing them to collect your information based on a purchase or based on the origin of the coins. They offered the service without KYC. Their internal policies, triggered by a blockchain analytics rating of your address, origin of the coins, or the destination address, call for collection of your info to complete their investigation. Use Cake Pay next time.