They are pseudo decentralised. They have a point of failure. Take down the operator and the exchange is gone. Happened before with an ethereum exchange. Ethereum delegated some control to miners which isn't decentralised