Not using PIN PAL, the probably of guessing the correct four numeral PIN code where two numerals can repeat with a single guess would be approximately 7200 to 1.  Remember, that there are some potential PIN codes with repeating or sequential numbers that are not allowed to be issued.  For example, 3333, 2202, 1234 and 7654 are restricted from PIN code use because they are more likely to be guessed.  

In addition to statistical probability,  ATMs or Automated Teller Machines (Bank Machines) are programmed to confiscate or deactivate a bank card upon a third incorrect PIN entry.  This renders the user "cardless" or the card "useless"!  Therefore, an unauthorized user must guess the correct PIN code within three guesses ... a statistical probability not much different. from above: 7198 to 1.