Many crowdfundings have this restriction. I am unable to elaborate on such legal aspects. I believe one of the necessary compliances is knowing who is receiving each token. No anonimity... But I am not quite sure. Maybe @dan could elaborate further on these issues or provide an example.