Neal Luke Email & Phone Number

United Kingdom

I specialise in assisting Betting and Gaming operators with regulatory issues and carrying out independent audits against regulator priorities, most notably those of the UK Gambling Commission. I was the first online focused compliance manager to be recruited for the UK Gambling commission following the Gambling (Licensing and Advertising) Act 2014. In this role I carried out hundreds of Compliance Assessments focusing on online (Remote) gambling licence holders. These have focused on AML, Safer Gambling, Advertising compliance, data security and other regulatory obligations. In my time supporting the industry, I have assisted during major regulatory assessments, utilising my knowledge of the inner workings of a major regulator and advising on implementation of controls utilising 20 years of experience in the online gaming world. I have also implemented frameworks for Audit, Risk and Compliance for start-ups and SME's which has including implementing data security standards such as ISO27001 and advising on a global compliance strategy, including USA and other global licence applications.

West Midlands

• Regular liaising with local and overseas regulators and licensing authorities including USA state specific regulators to oversee application and maintenance of operating licences as required.• Oversight of advertising, risk management, trademark, intellectual property, third party due-diligence, consumer protection, US and UK data protection regulations, ISO27001, contract maintenance, product reviews and all applicable gambling regulation.• Review of concepts, white papers and wireframes for new products which integrated digital currency and NFT aspects, advising on compliance and licensing requirements. • Strategic advice to the business regarding compliance requirements and products. Ensuring the compliance team is solution focused and viable options in partnership with commercial teams.• Review of App store requirements and correspondence as required with Apple and Google. • Correspondence with external legal counsel, securing and reviewing legal opinions, ensuring external knowledge is absorbed into internal teams and recorded efficiently. • Working closely with the technical and game development teams, implementing incident review procedures to ensure root causes are identified, corrective action taken and lessons are learned. • Review and advising on affiliate and partner agreements ensuring prior understanding of commercial objectives, highlighting key concerns for transparent discussion with partners.• Supported the compliant onboarding of 300,000 B2C users from multiple key jurisdictions including USA, UK, Canada and Holland. Also identifying the least restrictive onboarding methods. • Identifying compliance opportunities and the path of least resistance where appropriate, including reviewing licensing needs against alternate opportunities such as B2B partnerships or product amendments which lower regulatory risk and requirements. • Reviewing and assessing opportunity in new markets accounting for the existing product catalogue.

Birmingham, England, United Kingdom

• Frequent engagement with major regulators and governing bodies such as the Information Commissioners office, UK Gambling Commission, Advertising standards agency and Competition and Markets Authority.• Concept and white paper reviews for new games and products. Advising on how to achieve commercial goals compliantly. • The companies ‘Personal Management Licence’ holder for the compliance function registered with the UK Gambling Commission. • Ensuring effective policy and procedure reviews for consumer protection, AML, data protection, marketing and advertising and ISO27001.• Liaising with App development teams to accommodate both regulatory and app store requirements.• Review of risk assessments, policies and procedures updates.• Coordinating work for regulatory compliance assessments including preparation of key staff, review and compiling of core corporate documentation, coordinating assessments from operator side, making key representations to the regulator and coordinating actions following assessments and audits.• Review of Parliamentary discussion and independent research papers to identify compliance trends and proactively inform both the board and CEO of impending compliance risks.• Oversight and maintenance of company internal audit schedules including audit schedules for AML, Consumer Protection, GDPR, Marketing and Advertising.• Leading internal working groups for department leads and board, ensuring the senior leadership is aware of upcoming changes to regulation, consultations and industry learning.• Approval of internal risk assessment, policy and procedure updates. Ensuring an effective control framework for compliance stemming from an effective and robust business risk assessment.• Collaboration with external legal consult as required by board for priority issues.• Oversight of external due diligence processes for third party providers.

Nottingham, United Kingdom

• Senior leadership team member overseeing consumer protection, anti-money laundering (AML), data protection and industry specific regulations for a company composed of over 120 retail sites and a large online product.• Organisation and oversight of external audits in line with regulatory requirements, composing gap analysis and monitoring of actions to achieve both legal compliance and best practice.• Frequent correspondence with our regulators regarding consultations, audits and breach reports. Including the ICO and UKGC.• Development, oversight and implementation of new and existing controls for the purpose of consumer protection.• Composition and sign off on presentations and packs for presentation to senior board members and company CEO.• Direct reporting staff compose of a regulatory compliance manager, a data protection executive and a small team of AML analysts. • Provided consultation to other members of the senior leadership team for large projects involving fundamental changes to the business model.• Worked with procurement team to secure reputable third party resource as required for priority tasks.• Education and training of marketing teams to aid compliance with BCAP/CAP code, CMA and ASA related obligations.• Review and approval for suspicious activity reports (SARs) prior to submission to the National Crime Agency (NCA).• Ongoing development and coaching of staff.

Birmingham, United Kingdom

• Lead the implantation the General Data Protection Regulations (GDPR) requirements into the company model including oversight of company offices outside of the European Economic Area.• Development and implementation of an internal compliance audit schedule concentrating on the areas of focus and specific measures used by the business’s main regulator (the Commission).• Balancing compliance obligations with commercial interest, collaborating with heads of Marketing, operations and business strategy leaders.• Developing compliance training programs for offices in the UK and Philippines including travel to Manila. This covers area such as customer interaction, marketing and advertising, General Data Protection Regulations, anti-money laundering and UK gambling regulations.• Internal review of ISO27001 controls in preparation for annual external information security audit.• Monitoring of upcoming regulatory changes and developments and communication to relevant department leads. Including gap analysis against existing controls and leading on implementation of updated controls.• Communicating ‘lessons learned’, both from internal struggles and publicised sanctions from across industry to prompt internal reviews and checks, monitoring several external communications. • Review and final sign off on all promotions, marketing material, terms and conditions, processes and procedures and third-party contracts. Also composing checklists for first phase approval by department leads. • Development of revised competency-based interview structure and accompanying measures and weighting system for manager grade positions.• Development and oversight of third-party monitoring processes. • Updating threshold and procedures for customer due diligence, enhanced due diligence, source of funds/wealth and suspicious activity checks to ensure we met the regulators expectations.

Birmingham, United Kingdom

• Monitoring, understanding and enforcement of gambling related legislation including- Gambling Act 2005- Remote gambling and software technical standards- Licence conditions and codes of practice, the data protection act- The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017.• Monitoring of compliance trends and feeding relevant information into the Commissions intelligence database (Memex). • Proactive and reactive assessments of high impact operators focusing on areas such as anti-money laundering, social responsibility and marketing and advertising.• Compiling information for assessments and corporate evaluations drawing from previous information, open source checks, intelligence reports and businesses internal policies and procedures. • Open source information reviews in line with RIPA and escalating relevant issues to feed into the reactive compliance work stream. • Review of third party information security audits including support for colleagues regarding review of information security audits against both ISO27001:2005 and ISO27001:2013 standards. • Frequent engagement with many high impact gambling operators in a regulatory capacity. • Relationship management with senior stakeholders and compliance leads. Including advising regarding updates in regulation. • Ensuring a consistent approach between operators referring to previous cases paying special attention to any president setting decisions. • Review of businesses marketing and advertising to ensure it is done in line with relevant BCAP and CAP codes. Also ensuring social responsibility is implemented in all marketing. • Providing internal advice to Compliance, Enforcement and Intelligence leads regarding all compliance issues and licence holders. • Reviewing compliance to Anti-Money laundering regulations and POCA. • Reviewing terms and conditions against CMA regulation and guidance.

Birmingham, United Kingdom

• Direct line of communication for priority fraud issues spanning over 40 business licensees.• Frequent review of fraud prevention controls and risk analysis procedures.• Comprehensive report writing for product management to accurately convey project progress and milestone completion providing assurance of efficient progress.• Developing close working relationships with external stakeholders at senior management level taking care to uphold the professional reputation of PlayTech.• Relationship management during licensee acquisition and business mergers including Ladbrokes and Poker strategy.• Ensuring a consistent approach when dealing with ad hoc circumstances in line with existing policies and service level agreements.• Project planning including identifying business needs, setting of milestones and assessing the plan moving forward from any project.• Leading online poker expert at the Birmingham office. Responsible for organizing training presentations and schedules for all levels of poker knowledge across the office.• Personal performance plans and individual staff assessments for monthly one on ones held with 18 members of the collusion team reporting to myself.• Ensuring staff were effectively communicated their key performance indicators and that objectives were specific, measurable, achievable, realistic and time based.• Composing schedules to be carried out by myself for licensee visits, including overseas. Both for training and to assess procedures for maximized efficiency from both sides.• Resource management for various thematic projects ensuring minimum disruption to day to day department responsibilities and ensuring a diplomatic approach to conflicting priorities.• Identifying and constructing business cases for both back and front end development, in both the poker client and admin.• Responsible for interviewing and recruiting prospective members of staff, including competency based interviews.

• Delivered excellent levels of customer service in a busy B2B environment.• Delivering training presentations and heading meetings to help develop staff.• Responsibly moving large sums of money between licensee and customer accounts.• Developed relationships with new and existing customers.• Performed administration duties within data protection requirements.• Good experience with various email, word processing and spread sheet programs.• Human resources responsibilities including arranging staff rotas and holiday entitlement.• Responsible for overseeing training of new staff and introducing them to the collusion department.• Responsible for ensuring licensees adhere to PlayTech's various network policies.• Composing concise reports for fraud cases deducted from large volumes of complex information.