A private entity can ban customers for any reason except those specifically forbidden by law (race being the biggest one).

That said, this person was scamming them, they have both a right and a responsibility to their shareholders to ban her.