Your friend would be foolish to cause trouble with the Hotline as they could lose their privileges; there are a lot of T&Cs.

But yes, as the staff member would have been logged on to create the booking I imagine they can cancel the booking if they wanted to.

EDIT just seen - if you logged in using their details no one should bring this up as it is strictly forbidden