Really sorry this happened to you. If they require KYC, they should’ve made that clear before accepting your BTC — not after locking the funds. Using a VPN and throwaway email shouldn’t be a reason to freeze your money without warning.

Thanks for the heads up. Definitely a reminder: Not your keys, not your coins.