This privacy policy explains how Cibo (cibo.hk) collects, uses, retains and protects data.
1. Data sources
Cibo processes only publicly disclosed information:
- Allottee profile: derived from CCASS winner lists publicly disclosed by share registrars (e.g. Tricor, Tianxing). The ID numbers in these files are already masked (e.g. 31010263****) and contain no information that can directly identify an individual; allotment result announcements provide aggregate statistics such as valid applicant counts, allotted counts and oversubscription multiples per tier.
- Other public data: HKEXnews announcements, prospectuses and allotment result announcements.
2. Personal information we do not collect
CCASS winner lists
Only the format features of masked ID numbers are extracted for classification and aggregate statistics. No names, full ID numbers or individual records are stored; only aggregate statistics (counts, shares and distribution histograms) are kept.
FAFA internal orders
Name, ID number, ID type, client type, broker code and the raw channel string are never stored. The securities account number is stored only as a SHA-256 prefix (16 hex characters), used solely as a stable deduplication key and never displayed. Only the customer number and business fields such as subscription amount, quantity and fee are retained.
3. Inference methods
Region, province, gender and age attributes in the allottee profile are pattern-recognition inferences based on masked ID format features, not real personal data:
- ID-type classification: regular-expression matching of ID format (length, letter prefix, check digit).
- Region inference: Mainland, Hong Kong, Taiwan and Macau IDs are recognized directly by format; other countries/regions are inferred via passport prefix letters.
- Province inference (Mainland IDs only): the first 2 digits mapped to GB/T 2260 administrative-division codes.
- Gender inference (Mainland IDs only): the 17th digit — odd = male, even = female.
- Age inference (Mainland IDs only): age = current year − birth year from digits 7–10.
- Hong Kong ID issue era: inferred from historical allocation patterns of the leading letter.
These inferences may carry classification and statistical error.
4. Purpose
Aggregate statistics are used only for statistical research, IPO data analysis and internal risk/pricing reference.
5. Retention
Only aggregate statistics are retained; no raw data that could directly identify an individual is kept.
6. Legal basis
Data processing follows the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong; the data processed is already public and masked.
7. Your rights
You may request access to and correction of relevant data; for questions, please contact us via the site.
8. Disclaimer
All content is for information only and does not constitute investment advice; see the Terms of Use & Disclaimer page.
