Director of Data Privacy

We are ARB Interactive, the team behind Modo Casino, one of the top Social+ platforms in the US. Founded in 2022, we've grown to nearly 200 team members and were named one of Linked In's 2025 Top 50 Startups in the United States. We move fast, think big, and love bold ideas that push boundaries (and buttons). From new rewards to fresh game mechanics, every challenge is a chance to innovate and have fun doing it.

Our culture is collaborative, curious, and full of laughter because great ideas grow best between coffee, code, and a few epic high-fives.

ARB Interactive, Inc. (ARB) is seeking a Director of Data Privacy, who will act as the Data Privacy Officer (DPO) for ARB. The Director of Data Privacy/DPO will develop, lead and oversee our data privacy compliance operation and relevant teams and personnel responsible for building out and managing operational processes and programs that require compliance with various countries’ and states’ data privacy laws.

The Director of Data Privacy/DPO is directly responsible for representing the Data Privacy compliance program during virtual and onsite audits from global regulatory bodies, financial institutions, attorney general offices and other governmental agencies.

The Director of Data Privacy/DPO will be responsible for developing, implementing, and maintaining the company’s data protection and privacy program in alignment with applicable laws and regulatory requirements, including but not limited to GDPR, CCPA, and gaming-specific regulations. This role will oversee the collection, processing, storage, and sharing of personal and financial data for players, employees, and partners, ensuring that all data handling practices are transparent, secure, and compliant.

The Director of Data Privacy/DPO will conduct data protection impact assessments (DPIAs), manage records of processing activities, monitor third-party vendor compliance, and establish policies and procedures that reflect industry best practices in cybersecurity and responsible gaming environments.

In addition, the DPO will serve as the primary point of contact for regulators, supervisory authorities, and internal stakeholders on all matters related to data privacy and protection. The role includes leading incident response efforts related to data breaches, coordinating required notifications, and delivering privacy training and awareness programs across the organization. The DPO will advise leadership on privacy-by-design principles in product development, marketing initiatives, and platform enhancements, helping the company balance innovation with regulatory compliance and user trust.

The ideal candidate will have at least 8 years of experience managing data privacy compliance and laws. In addition to the following specific responsibilities, employee may be required to perform other such duties as assigned by ARB and their supervisor.

This position will establish the foundation for ARB data privacy protections, policies and procedures. It will work with a fantastic team of executives who endeavor to grow, develop and innovate ARB’s best-in-class product offerings. Reporting to ARB’s General Counsel, this role will focus on ensuring ARB’s compliance with various countries and states data privacy laws, while educating and advising ARB’s management team and front line personnel on data privacy protections as well as the following:

• Lead and manage the company’s data privacy and protection program for a fast-growing online social casino and social plus gaming platform;
• Ensure compliance with GDPR, CCPA/CPRA, and applicable gaming regulatory requirements across all jurisdictions;
• Familiar with California Invasion of Privacy (CIPA) and Illinois Biometric Information Privacy Act (BIPA) claims and corresponding litigation;
• Oversee lawful collection, processing, storage, and transfer of player and financial data, including KYC, AML, and geolocation information;
• Embed privacy-by-design principles into product development, payments, marketing, analytics, and platform integrations;
• Serve as the primary liaison with regulators and data protection authorities;
• Lead data breach response,…