Data Privacy Philippines Your Rights

4217 Privacy Policy – How Your Personal Data Is Protected

At 4217, protecting the personal information of every registered player in the Philippines is a core part of how we operate. This Privacy Policy explains exactly what data we collect, why we collect it, how it is stored and secured, and what rights you have as a user of the 4217 platform. We encourage you to read this page carefully alongside our Terms and Conditions so you have a complete picture of how your information is handled when you use our mobile betting and casino-style entertainment services.

Your data is never sold Encrypted storage Full access rights Mobile-first security Philippine data law compliant No third-party ad tracking Secure payment data handling Your data is never sold Encrypted storage Full access rights Mobile-first security Philippine data law compliant No third-party ad tracking Secure payment data handling

What We Collect and How We Use It

A clear, plain-language overview of our data practices — built for Filipino players who want to know exactly where their information goes.

Registration Data

When you create a 4217 account, we collect your full name, date of birth, email address, mobile number, and a username of your choice. This information is required to verify your identity, confirm that you meet the minimum age requirement of 21 years for players in the Philippines, and set up your account securely. Your registration details are stored in encrypted form and are never shared with unrelated third parties. We may ask you to update or re-confirm these details if our records become outdated or if a verification check flags a discrepancy. Keeping your registration information accurate helps ensure your withdrawals and account communications are processed without delays.

Payment and Transaction Data

When you deposit or withdraw funds through 4217 using GCash, Maya, or supported bank transfer channels, our payment processing partners handle the transaction securely on our behalf. We retain records of transaction amounts, dates, payment method types, and reference numbers to maintain accurate account histories and comply with financial record-keeping obligations. We do not store your full GCash PIN, Maya credentials, or complete bank account numbers — only the minimum information needed to trace and verify a specific transaction. Payment data is handled in strict accordance with applicable Philippine data protection and financial regulations. If you have a question about a specific transaction record in your account, you can raise this through our FAQ page.

Device and Usage Data

When you access 4217 on your smartphone, tablet, or desktop browser, we automatically collect certain technical data including your device type, browser version, operating system, IP address, and session timestamps. This information is used to maintain platform security, detect unusual login activity, improve mobile performance for Filipino users, and troubleshoot technical issues you may experience. We do not use device data to build advertising profiles or sell it to third-party marketing companies. Usage patterns — such as which sections of the platform you visit most frequently — are analysed in aggregate form only to help us improve the overall experience. You can review our use of cookies and session tracking in the relevant section below.

Identity Verification Documents

In line with responsible gaming obligations and account security requirements applicable in the Philippines, 4217 may request a copy of a government-issued ID — such as a Philippine National ID, passport, or driver's licence — when you register, request a withdrawal, or if our security systems flag an account for review. These documents are processed solely for the purpose of confirming your identity and age, and are stored with strict access controls so that only authorised 4217 personnel involved in the verification process can view them. Identity documents are not used for any marketing purpose and are securely deleted once the verification requirement has been fulfilled. If your submission is rejected for any reason, you will be notified through your registered contact details with guidance on how to resubmit. Refusing to provide verification documents when requested may result in a temporary hold on withdrawal requests until the review is completed.

Communications Data

If you contact 4217 support or submit a query through any available channel, we retain a record of that communication — including the content of messages, timestamps, and any attachments — for the purpose of resolving your issue and improving our support quality. Platform notifications, account alerts, and promotional messages related to voucher offers are sent to your registered email address or mobile number based on your account preferences. You may opt out of non-essential promotional communications at any time by updating your notification settings or contacting support. Essential account communications — such as deposit confirmations, withdrawal updates, and security alerts — cannot be opted out of as they are necessary for the safe operation of your account. We do not share your contact details with third-party advertisers under any circumstances.

Cookies and Session Data

4217 uses essential session cookies to keep you securely logged in while you navigate the platform and to remember your language and display preferences between visits. These cookies are strictly necessary for the platform to function correctly and do not track your activity across other websites. We do not use third-party advertising cookies, social media tracking pixels, or any form of cross-site behavioural profiling. Analytics data collected through first-party cookies is used only in anonymised, aggregated form to understand platform usage trends and improve the mobile experience for users across the Philippines. You can manage or clear cookies through your browser settings at any time, though doing so may affect the functionality of certain platform features such as staying logged in between sessions.

Your Rights Under Philippine Data Law

The Data Privacy Act of 2012 gives every Filipino player specific rights over their personal information. Here is how 4217 honours those rights.

Right to Be Informed

You have the right to know that 4217 collects your personal data, what specific data is collected, the purpose for which it is collected, and how long it will be retained. This Privacy Policy is the primary document through which 4217 fulfils this obligation, and it is made freely available on the platform at all times. We will notify you of any material changes to this policy through your registered contact details before those changes take effect. If you have questions about any aspect of our data practices that are not covered here, you are encouraged to reach out through the contact details provided at the end of this document. Transparency is not just a legal requirement for 4217 — it is a foundation of the trust we aim to build with every player in the Philippines.

Right to Access

You may request a copy of the personal data that 4217 holds about you at any time by contacting our support team through the channel listed on the FAQ page. We will provide a summary of your stored data within a reasonable timeframe following receipt of a valid access request, subject to identity verification to confirm the request is coming from the account holder. The information provided will cover registration data, transaction history, and any identity verification records associated with your account. There is no charge for a standard access request, though 4217 reserves the right to apply a reasonable administrative fee for repeat or excessive requests. If any of the data we provide appears to be inaccurate, you have the right to request a correction as described below.

Right to Correction

If you believe that any personal information held by 4217 is inaccurate, incomplete, or out of date, you can request that it be corrected by contacting support or updating the relevant fields in your account profile where self-service editing is available. Certain sensitive fields — such as your registered name and date of birth — may require supporting documentation before a correction can be applied, to ensure the integrity of our identity verification records. Correction requests are processed as promptly as possible, and you will be notified once the update has been made. Where a correction affects a past transaction or verification record, 4217 will annotate the record rather than delete it, in order to maintain an accurate audit trail as required under Philippine financial regulations. You have the right to request that downstream parties who received your data before the correction was made are also notified of the change.

Right to Erasure

You may request the deletion of your personal data from 4217's systems by submitting a written erasure request through our support channel. 4217 will process deletion requests in accordance with the Data Privacy Act of 2012, which permits us to retain certain data for the minimum period required to fulfil legal, financial, and regulatory obligations — including transaction records, identity verification outcomes, and responsible gaming history. Data that is not subject to a legal retention requirement will be permanently deleted within a reasonable period following receipt of a verified erasure request. Where full deletion is not immediately possible due to an active legal hold or ongoing regulatory review, 4217 will suppress the data from active use and notify you of the expected timeline for full deletion. Submitting an erasure request will also initiate the account closure process if your account is still active at the time of the request.

Right to Object and Data Portability

You have the right to object to the processing of your personal data for purposes beyond the core operation of your 4217 account — for example, if you do not wish to receive promotional communications or if you object to aggregated analytics based on your usage patterns. Objection requests related to direct marketing will be honoured immediately upon receipt. For other processing activities, 4217 will assess the objection and respond within a reasonable period, balancing your privacy rights against any legitimate operational or legal grounds for continued processing. You also have the right to request a portable copy of your data in a structured, machine-readable format where technically feasible, so that you can transfer it to another service provider if you choose. To exercise any of these rights, please contact 4217 support — contact details are provided at the base of this page and on the FAQ page.

Common Privacy Questions

Quick answers to the data privacy questions Filipino players ask most often about 4217.

No. 4217 does not sell, rent, or trade your personal data to any third-party organisation for commercial purposes. Your data is shared only with trusted service partners — such as payment processors and identity verification providers — who are contractually required to handle it solely for the purpose of delivering the specific service requested, and who are prohibited from using it for their own marketing or commercial activities. These partners are carefully selected and are required to meet data protection standards consistent with applicable Philippine law. Any data sharing arrangement is limited to the minimum information necessary to complete the relevant process. If this policy ever changes in a way that affects how your data is shared, you will be notified in advance and given the opportunity to object.

Following account closure, 4217 retains certain categories of data for the minimum period required under applicable Philippine financial, anti-money laundering, and responsible gaming regulations — typically this covers transaction records, identity verification outcomes, and account activity logs. Data that is not subject to a legal retention requirement is deleted or anonymised promptly after your account closure is confirmed. You will be informed of the specific retention period applicable to your account data at the time of your closure request if you ask for this information. Once the retention period expires, your data is permanently and securely deleted from 4217's systems. You may submit a Subject Access Request at any time during the retention period to confirm what data is still held and for what purpose.

4217 does not store your GCash PIN, Maya password, or complete payment credentials. When you initiate a deposit or withdrawal, the transaction is handled directly by the relevant payment provider's secure infrastructure, and 4217 receives only a transaction reference, the amount, and a status confirmation. The payment method type associated with your account — for example, that you use GCash as your primary withdrawal channel — is recorded in your account profile to facilitate future transactions and for audit purposes. This minimal payment reference data is stored securely and is accessible only to authorised personnel for transaction verification and customer support. For detailed information on how GCash and Maya handle your data on their own platforms, you should refer to their respective privacy policies.

To submit a data access, correction, or erasure request, please contact the 4217 support team through the channel listed on the FAQ page. All requests must be submitted by the registered account holder and will require identity verification before they are actioned, to ensure your data is not released or deleted in response to an unauthorised request. Standard access requests are processed within a reasonable timeframe at no charge. Deletion requests will be assessed against applicable legal retention requirements, and you will receive a clear explanation of which data can be deleted immediately and which must be retained for a specified period. 4217 is committed to responding to all data rights requests in good faith and in compliance with the Data Privacy Act of 2012.

Your Data, Your Control

4217 is built on the principle that Filipino players deserve transparency and control over their personal information. If you have a question about this policy or want to exercise any of your data rights, visit the FAQ page or register an account to access your full privacy settings.