The system of in-game purchases is built in such a way that no funds can be charged without the knowledge of the player.
It's very important to set a strong password and not to let other people use your game.
If this has happened anyway, we recommend you contact Apple Support for a refund. Please note that only Apple has access to your bank card details.