{"id":3347322,"url":"https://alion.io/job/lcky-group-data-protection-officer","title":"Data Protection Officer","company":{"id":674430,"name":"LCKY Group","domain":"lckygroup.com","url":"https://alion.io/company/lckygroup","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":null},"role":"Legal","role_family":"Legal","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Sliema, Malta"],"countries":["MT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false}],"status":"live","first_seen_at":"2026-10-27T15:58:41Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T23:12:35Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"The Data Protection Officer (DPO) will oversee and support data protection compliance across LCKY Group, ensuring that personal data is processed responsibly and in accordance with the GDPR and other applicable privacy legislation.\nWorking closely with Legal, Compliance, IT, Information Security, Marketing, Customer Support, HR and other business functions, the DPO will provide practical guidance on data protection risks and help embed privacy considerations into business processes, products and operations.\nThe role will cover the full data protection lifecycle, including customer and employee data, marketing activities, digital products, data sharing, third-party relationships and international operations. The successful candidate will combine strong technical knowledge of data protection legislation with a pragmatic, business-oriented approach.\nWhat will you be doing?\nData Protection Governance & Compliance\nDevelop, implement and maintain the Group's data protection policies, procedures, guidelines and internal controls.\n\nMonitor compliance with the GDPR and other applicable data protection and privacy requirements across relevant entities and markets.\n\nMaintain and oversee records of processing activities and support the development of an effective data protection governance framework.\n\nMonitor regulatory developments and assess their potential impact on the Group's operations, products and customer-facing activities.\n\nAdvise relevant stakeholders on data protection obligations and support the implementation of appropriate remedial actions where required.\n\nPrivacy Risk Management\nConduct and oversee Data Protection Impact Assessments (DPIAs), legitimate interest assessments and other privacy risk assessments where applicable.\n\nAdvise on privacy-by-design and privacy-by-default principles when developing or changing products, systems, processes and marketing activities.\n\nReview data processing agreements, vendor arrangements, data-sharing agreements and international data transfers in collaboration with Legal and relevant stakeholders.\n\nSupport the assessment of new technologies and data-driven initiatives, including customer analytics, personalisation and AI-enabled tools.\n\nCustomer Data & iGaming Operations\nProvide data protection guidance on customer account management, identity verification, payment-related processes, customer support and responsible gambling activities, where personal data is involved.\n\nAdvise on the lawful use of customer data for marketing, promotions, segmentation and personalised communications.\n\nSupport the handling of data subject requests, including access, erasure, objection and other applicable rights.\n\nAssess privacy considerations relating to player profiling, automated decision-making and the processing of sensitive personal data, where applicable.\n\nWork with Compliance, Information Security and operational teams to ensure that data protection requirements are considered alongside relevant gaming and regulatory obligations.\n\nData Breaches & Regulatory Liaison\nCoordinate the data protection response to personal data breaches, working with Information Security, Legal and relevant business teams to assess risks and determine appropriate notification requirements.\n\nAct as a contact point for data subjects and supervisory authorities on matters relating to personal data processing, as required.\n\nSupport investigations, regulatory enquiries and communications relating to data protection matters.\n\nMaintain appropriate documentation of incidents, decisions, risk assessments and corrective actions.\n\nTraining & Stakeholder Engagement\nDevelop and deliver data protection training and awareness initiatives across the Group.\n\nProvide practical advice to stakeholders and promote a culture of accountability and responsible data handling.\n\nConduct periodic compliance reviews and report on data protection risks, findings and improvement actions to senior management.\n\nWork collaboratively with internal teams and external advisers to address complex or cross-border privacy matters.\n\nWho are you?\nDegree in Law, Data Protection, Compliance or a related discipline.\n\nDemonstrable experience in data protection, privacy compliance or a related legal or regulatory role.\n\nStrong knowledge of the GDPR and practical experience applying data protection requirements in a business environment.\n\nUnderstanding of data protection challenges in online gaming, digital platforms, e-commerce, financial services or other regulated industries.\n\nExperience with DPIAs, data mapping, data subject requests, breach management, privacy policies and third-party data processing arrangements.\n\nAbility to interpret legal requirements and translate them into clear, practical business recommendations.\n\nStrong analytical, organisational and stakeholder management skills.\n\nExcellent written and verbal English, with the ability to communicate complex topics clearly to non-specialists.\n\nDesirable Experience\nPrevious experience as a formally appointed DPO or in a dedicated privacy role.\n\nExperience within the iGaming industry or another highly regulated, international business.\n\nProfessional certification such as CIPP/E, CIPM or an equivalent data protection qualification.\n\nFamiliarity with international data transfers, digital marketing, customer profiling and privacy considerations relating to emerging technologies.\n\nExperience working across multiple jurisdictions and business entities.\n\nBy joining us, you're not only gaining an opportunity to work and collaborate with the best talent in our industry, you’ll also enjoy a range of fantastic perks!\nA competitive and attractive salary\n\nPrivate health insurance\n\nAnnual wellbeing benefit allowance\n\nA weekly breakfast\n\nSocial events for building strong relationships with colleagues\n\nRelocation package (when relevant)\n\nAbout LCKY Group:\nLCKY Group brings together a portfolio of leading online casino brands - LuckyCasino, HappyCasino, FlaxCasino, Vera&John, OneCasino and RoyalCasino - alongside its in-house game studio, Swintt. With a strong people-led culture and a proven ability to build and scale in regulated environments, the group is well positioned to accelerate its momentum across key markets.\nLCKY Group continues to expand across international markets: Sweden, Finland, Ontario, and Chile, as well as in Spain, Denmark and the Netherlands. The Group is home to a diverse and multiskilled workforce, based in a range of locations, including Malta, Stockholm, Sofia, Barcelona, Hoorn, Estepona, Gibraltar and Melilla.\nThe Group also operates in the B2B vertical through its in-house game development studio, Swintt, which delivers high-quality slot games to operators worldwide.\nWith an unshakeable belief in its people that’s woven into the company’s DNA, LCKY Group looks boldly to the future with a focus on building appeal in regulated markets.\nLearn more about us at https://www.lckygroup.com/\nAt LCKY Group we firmly believe that our diversity is what makes us unique and that everyone is welcome to enjoy the ride! We are committed to uphold a high level of diversity and inclusion throughout our group.","description_format":"text","description_chars":7157,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Health insurance"],"hiring_locations":[{"name":"Malta","iso":"MT","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Gaming","iGaming & Gambling"],"lifecycle":[{"event":"open","at":"2026-10-27T17:37:11Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":21,"reasons":["conf:8","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/lcky-group-data-protection-officer","json_url":"https://alion.io/job/lcky-group-data-protection-officer.json","meta":{"generated_at":"2026-10-31T02:31:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3519,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":674430},"rest":"https://alion.io/mcp/rest/get_company?id=674430"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flcky-group-data-protection-officer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flcky-group-data-protection-officer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flcky-group-data-protection-officer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lcky-group-data-protection-officer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flcky-group-data-protection-officer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3347322}},{"tool":"search_jobs","arguments":{"company":"lckygroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3347322},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}