Money deducted from my account without my authorization

I received a call on the 23rd of June 2021 from hotel stay Pretoria branch, they were updating my information since my husband purchased the product for the 2nd time on the 18th of June. As about they were about to end a call they requested my card number and I was sceptical to give them and told him my hubby has already paid. Then the Agent said no the card number it is just for record keeping if we want to book next time. To my Suprise an hour later my account was debited with R2990. 00 from hotel stay without my authorization . I immediately informed customer care service about the incidents and the lady(Sakhile) confirmed that money was deducted from me on the system, therefore she will immediately cancel it and I will be refunded within the next 2 to 24 hours. Today on the 24th of June around 9:00 am I contacted the customer service again and they told me that they will call me back about the details when will I get my money. Around 15:00 I contacted them again the lady became so rude and arrogant telling me she will let Sakhile to call me back, because apparently I will get my money back within 12 weeks and she hang up when I was busy with her on the phone.