Some random thoughts and comments. Not 100% what you are looking for in terms of why BitPay does what they do, but some possible ideas.
But:
Because a lot don't care. Or they don't know. Or they think the rules apply to other people. Or are fast and loose with the rules because they think they can get away with it. You said membership. Do they think an email address is enough? That is *their* call. The law might say different if push comes to shove. Or...they are not US based.
Also, keep in mind with "direct" sales it's a different story.
You said you booked a hotel.
Did you book it direct with BTC or did you get a hotels.com giftcard?
I did an entire Black Hat / DefCon trip to LasVegas paid all with BTC but it was all converted though different people to giftcards.
Why gift cards? Because almost no hotels in Vegas take BTC (and none on the strip near the convention), And NO airline takes BTC direct.
(Once again here in the USA) And if you are in a hotel they have your ID so even if I bought and paid anonymously the minute I hit the check in counter @ Ceasars it's all over in terms of privacy. Same with flights. Want to fly somewhere in the USA try getting past TSA without ID.
Remember that is part of the issue here. Order from Merchant "X" who uses BitPay the they know who you are. BitPay does not. All BitPay has is an API call for an invoice.
So at a *guess* it's location & lawyers. They are a US corporation so their legal department is probably a bit more paranoid then others. They are also trying to be a big player so dot every i cross every t and make sure nobody can come after them for anything.
I don't know what you have bought from whom and where they and you are located so there is that.
And, also if they are not doing a direct conversion to fiat they can probably get away with a bit more.
Which might also be part of the issue we as a group have to think about.
Picking on NewEgg.com they probably are having all or at least a large chunk of their incoming BTC converted to USD.
Because, they have to pay their employees, suppliers, rent, insurance, utilities, etc in USD fiat not BTC.
So we complain that BitPay is following the KYC / AML law but what are we doing to make PSEG (electric), JLL (property manager), HP, etc. accept BTC?
If they could just give out the BTC that comes in then BitPay goes away because the BTC to fiat need dwindles to almost nothing and you can do it in house at that point and they can make their own decision to KYC / AML
Now if you will excuse me I am off to order dinner from The Cheesecake Factory with a giftcard I bought on bitrefill paid for with a lightning payment that ran through my own node . But...they still know who I am because they know what IP my node is on and you bet your ass the cable company knows what IP was on what modem and when so privacy fail again. So it is somewhat simple to trace if needed.
Stay safe.
-Dave
One more thing....
<--Full disclosure I have not checked the below since I posted it on reddit months ago, things might have changed but we were having the same discussion back then and I was being a bit snippy-->
Lets take a look at giftcards. Off the top of my head you can convert BTC & other cryptos to GCs through
bitrefill.com who does their own conversion and is based out of Sweden
coinsbee.com not sure where they are based but 100% sure it's not USA and they convert through coingate who is in Lithuania
egifter.com who is based about 5 miles from my house in NY and processes through either bitpay OR net-cents.com (Canada?)
And ..... BitPay through their app.
Guess who has the best rates by far this Christmas...BitPay direct, although "by far is still only 2% less" it's still a non trivial amount on larger purchases.