They don't sale your personal data but using it for their own marketing purposes. Also every exchange have legal obligation to store data of any customer so that they can answer on any request from authorities if law enforcement happen in one day. Its known as Know Your Customer and Anti money laundering acts.