Since project team have no definite answer about multi-account or bots, let us tackle it in an indirect way: use of KYC.
KYC can be as simple as registration of mobile number, email, and BSC address. After proper registration, withdrawals of UMY will need the input of codes sent [on all three]. It is highly unlikely bot users or even those who use multiple accounts, with their broad amount of accounts, can have and/or monitor several mobile numbers or emails; although if possible, it can make it more difficult for them to proceed.