Finchoice Committed a *****ulent in My account with my approval

I have a loan with finchoice, I went and paid in R2500.00 from African Bank account, this is was because I was told that they don't have African bank on their system, so I had to do a manual transfer from My African Bank account, the next thing they go into my African bank account and Debit R983.00 and R2776.69 and R1051.83 and RR85.00 All the above were done on my account without my approval, the question is, can they just go into somebody's account and take what ever they want, where is personal information privacy