That is beyond stupid. I bank with Citi, and don't think that i've ever used the website outside the UK, but certainly wouldn't enter that information into any website, ever.
UA Fan/section 107 - is this really that common, either with Citi or anyone else? To ask for debit card number I can almost believe, but PIN too???