Ask HN: Reaping bug bounty without a special program

Hello HN!

I believe I have found a pretty serious bug in a United Arab Emirates government website that let's you receive passport and other information of residents.

I have no intention of selling this to untrustworthy parties, but also don't want to just give the bug away since I hope to get some $ for it.

So far I have only found https://bugbounty.ae and they told me I can just share a bug with them, but I won't get any rewards since there are no public programs for it.

What would you do if you were in my shoes?