A specific email address will take precedence over a domain on the VIP list. This allows you to add an entire domain to a specific list (Approve, Review, or Decline) but retain the ability to make exceptions for specific email addresses.
You may have added *@KOUNTDEMO.COM to the VIP approve list to make sure all orders go through, but you still want to have orders from USER@KOUNTDEMO.COM flagged for review.
In this example, adding USER@KOUNTDEMO.COM to the VIP Review list would cause the transaction to be flagged for review even though the domain *@KOUNTDEMO.COM is on the VIP approved list. Other users, such as USER32@KOUNTDEMO.COM would be approved even if review or decline rules triggered.