Data Protection Officer

The Data Protection Officer (DPO) will oversee and support data protection compliance across LCKY Group, ensuring that personal data is processed responsibly and in accordance with the GDPR and other applicable privacy legislation.

Working closely with Legal, Compliance, IT, Information Security, Marketing, Customer Support, HR and other business functions, the DPO will provide practical guidance on data protection risks and help embed privacy considerations into business processes, products and operations.

The role will cover the full data protection lifecycle, including customer and employee data, marketing activities, digital products, data sharing, third-party relationships and international operations. The successful candidate will combine strong technical knowledge of data protection legislation with a pragmatic, business-oriented approach.

What will you be doing?

Data Protection Governance & Compliance

• Develop, implement and maintain the Group's data protection policies, procedures, guidelines and internal controls.

• Monitor compliance with the GDPR and other applicable data protection and privacy requirements across relevant entities and markets.

• Maintain and oversee records of processing activities and support the development of an effective data protection governance framework.

• Monitor regulatory developments and assess their potential impact on the Group's operations, products and customer-facing activities.

• Advise relevant stakeholders on data protection obligations and support the implementation of appropriate remedial actions where required.

Privacy Risk Management

• Conduct and oversee Data Protection Impact Assessments (DPIAs), legitimate interest assessments and other privacy risk assessments where applicable.

• Advise on privacy-by-design and privacy-by-default principles when developing or changing products, systems, processes and marketing activities.

• Review data processing agreements, vendor arrangements, data-sharing agreements and international data transfers in collaboration with Legal and relevant stakeholders.

• Support the assessment of new technologies and data-driven initiatives, including customer analytics, personalisation and AI-enabled tools.

Customer Data & iGaming Operations

• Provide data protection guidance on customer account management, identity verification, payment-related processes, customer support and responsible gambling activities, where personal data is involved.

• Advise on the lawful use of customer data for marketing, promotions, segmentation and personalised communications.

• Support the handling of data subject requests, including access, erasure, objection and other applicable rights.

• Assess privacy considerations relating to player profiling, automated decision-making and the processing of sensitive personal data, where applicable.

• Work with Compliance, Information Security and operational teams to ensure that data protection requirements are considered alongside relevant gaming and regulatory obligations.

Data Breaches & Regulatory Liaison

• Coordinate the data protection response to personal data breaches, working with Information Security, Legal and relevant business teams to assess risks and determine appropriate notification requirements.

• Act as a contact point for data subjects and supervisory authorities on matters relating to personal data processing, as required.

• Support investigations, regulatory enquiries and communications relating to data protection matters.

• Maintain appropriate documentation of incidents, decisions, risk assessments and corrective actions.

Training & Stakeholder Engagement

• Develop and deliver data protection training and awareness initiatives across the Group.

• Provide practical advice to stakeholders and promote a culture of accountability and responsible data handling.

• Conduct periodic compliance reviews and report on data protection risks, findings and improvement actions to senior management.

• Work collaboratively with internal teams and external advisers to address complex or cross-border privacy matters.

Who are you?

• Degree in Law, Data Protection, Compliance or a related discipline.

• Demonstrable experience in data protection, privacy compliance or a related legal or regulatory role.

• Strong knowledge of the GDPR and practical experience applying data protection requirements in a business environment.

• Understanding of data protection challenges in online gaming, digital platforms, e-commerce, financial services or other regulated industries.

• Experience with DPIAs, data mapping, data subject requests, breach management, privacy policies and third-party data processing arrangements.

• Ability to interpret legal requirements and translate them into clear, practical business recommendations.

• Strong analytical, organisational and stakeholder management skills.

• Excellent written and verbal English, with the ability to communicate complex topics clearly to non-specialists.

Desirable Experience

• Previous experience as a formally appointed DPO or in a dedicated privacy role.

• Experience within the iGaming industry or another highly regulated, international business.

• Professional certification such as CIPP/E, CIPM or an equivalent data protection qualification.

• Familiarity with international data transfers, digital marketing, customer profiling and privacy considerations relating to emerging technologies.

• Experience working across multiple jurisdictions and business entities.

By joining us, you're not only gaining an opportunity to work and collaborate with the best talent in our industry, you’ll also enjoy a range of fantastic perks!

• A competitive and attractive salary

• Private health insurance

• Annual wellbeing benefit allowance

• A weekly breakfast

• Social events for building strong relationships with colleagues

• Relocation package (when relevant)

About LCKY Group:

LCKY Group brings together a portfolio of leading online casino brands - LuckyCasino, HappyCasino, FlaxCasino, Vera&John, OneCasino and RoyalCasino - alongside its in-house game studio, Swintt. With a strong people-led culture and a proven ability to build and scale in regulated environments, the group is well positioned to accelerate its momentum across key markets.

LCKY Group continues to expand across international markets: Sweden, Finland, Ontario, and Chile, as well as in Spain, Denmark and the Netherlands. The Group is home to a diverse and multiskilled workforce, based in a range of locations, including Malta, Stockholm, Sofia, Barcelona, Hoorn, Estepona, Gibraltar and Melilla.

The Group also operates in the B2B vertical through its in-house game development studio, Swintt, which delivers high-quality slot games to operators worldwide.

With an unshakeable belief in its people that’s woven into the company’s DNA, LCKY Group looks boldly to the future with a focus on building appeal in regulated markets.

👉 Learn more about us at https://www.lckygroup.com/

At LCKY Group we firmly believe that our diversity is what makes us unique and that everyone is welcome to enjoy the ride! We are committed to uphold a high level of diversity and inclusion throughout our group.

Advertised on Glitnor's own careers site. Apply through the employer's page.