Video game chat platform tells users that driver’s licences and passports were among the forms of data accessed via a third-party customer service provider