Generally, the private keys are kept by the exchanges stuffs or managers, there are risks that the exchanges will take away your coins, but I think some big exchange will not do that since they can make great profit to keep the exchange safe, instead of taking the coins away for a short time profit.