Extradition is based on treaties/agreements between countries, and they go both ways to make sure criminals cannot escape just by crossing borders. As for Kim Dotcom, his actions may fall under US jurisdiction as some of its customers and servers were in the USA, and whatever he was potentially infringing (copyright among others?) is protected and recognized by international treaties.

For online businesses it's a lot more risky as your customers and operations may be located anywhere.