But my gut tells me that they're not legit, especially since they've promised to customers before that there will be no KYC explicitly in their policy statement.
You're in a sticky situation. I do understand that you are cautious with your docs but it seems like that it'll either be a) you provide them and *potentially* get your funds back, b) you guarantee privacy/security and not provide anything or c) you somehow gain enough publicity to make them panic, but that is unlikely since it's essentially them admitting that they're not a regulated entity.
After i made some "noise" on Bestchange & Bitcointalk i finally received a reply from them. Obviously they still didnt care that much about my issue cause "they had the right to do so" since it was in their website(the AML/KYC policy was at the end of the main page). Though, i still think that it wasn't very OK of them to do so cause they cared to reply only when they saw that i am posting bad reviews about them. The response i got after i told them multiple times that i won't send them documents unless they send some kind of proof of their address was "We will re-consult with the compliance team and check if there are any other possibilities for KYC.", so ok i still wasnt ok cause i knew every type of KYC would not be OK for my privacy and the security of my personal info but i was gonna wait for a reply cause i still thought the Owner would understand. So after i waited for another day and got this response:
"Compliance team responded as follows:
An alternative option for KYC verification is that the user can submit a selfie which he is holding a government-issued ID and a paper note.
On the note he should handwrite his wallet address, as submitted in fox, the current date and the words: "for fox.exchange"."
And this was my response to them and i attached a screen recording where it shows my Binance ETH address(the one i used to exchange my coins to) and i went to my profile and showed the Verified profile: https://i.imgur.com/HgZS2GR.png
After another day(without a reply from them) i sent 2-3 emails telling them that im still waiting and urging them to take some kind of action i finally got refunded.
I also wanna say that this (https://i.imgur.com/djFKn90.png) has been added recently and im 99% sure that before there was no AML/KYC mentioned in that box. This is still a good thing though, cause it removes the kinda doubt that people(me as well) had that they're hiding the AML/KYC to suspend transactions.
I still think that Bestchange should add the icon they use to let people know that the exchanger might ask for documents or something similar.
I have to thank Bestchange cause im pretty sure fox.exchange wouldn't have cared that much to reply to me without them taking action.
p.s. I would also like to know how does Bestchange know the location of an exchanger cause a few weeks ago it showed that fox.exchange is from Russia now it shows that its from the UK. I also found an archive(https://web.archive.org/web/20190401155132/https://www.bestchange.com/foxexchange-exchanger.html) that shows they're from NL, it seems that you just need a VPN when you use Bestchange and it changes your "location" completely.